Port details |
- gvm Greenbone vulnerability management (metaport)
- 23.10.0 security =3 23.10.0Version of this port present on the latest quarterly branch.
- Maintainer: acm@FreeBSD.org
- Port Added: 2021-01-06 09:18:21
- Last Update: 2024-09-20 06:34:30
- Commit Hash: 0b1f933
- People watching this port, also watch:: xrdp, telegram-desktop, osv-scanner, memcached, R
- License: NA
- WWW:
- https://www.openvas.org/
- Description:
- This is the metaport to install GVM applications and libraries.
When the OpenVAS project was created it only consisted of an engine for
scanning vulnerabilities. Shortly after Greenbone Networks was funded to
achieve professional support for vulnerability scanning. Greenbone started to
lead the development, added several software components and turned OpenVAS into
a vulnerability management solution still keeping the values of free software.
After several years it became obvious that using OpenVAS as the brand name for
the open source project and funding nearly all development of the project was
not recognized from the outside. Therefore after the release of the OpenVAS 9
framework it got renamed to Greenbone Vulnerability Management (GVM) and
released as Greenbone Source Edition (GSE).
- ¦ ¦ ¦ ¦
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- To install the port:
- cd /usr/ports/security/gvm/ && make install clean
- To add the package, run one of these commands:
- pkg install security/gvm
- pkg install gvm
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: gvm
- Flavors: there is no flavor information for this port.
- distinfo:
- There is no distinfo for this port.
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- python3.11 : lang/python311
- Test dependencies:
-
- python3.11 : lang/python311
- Runtime dependencies:
-
- libgvm_base.so : security/gvm-libs
- gvmd : security/gvmd
- ospd-openvas : security/py-ospd-openvas@py311
- openvas : security/openvas
- notus-scanner : security/py-notus-scanner
- greenbone-feed-sync : security/py-greenbone-feed-sync@py311
- gsad : security/gsad
- index.html : security/gsa
- gvm-cli : security/py-gvm-tools@py311
- py311-python-gvm>=0 : security/py-python-gvm@py311
- python3.11 : lang/python311
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for gvm-23.10.0:
GVM-TOOLS=on: Install GVM tools
PYTHON-GVM=on: Install GVM python API library
===> Use 'make config' to modify these settings
- Options name:
- security_gvm
- USES:
- metaport python
- pkg-message:
- For install:
- GVM ports were installed
If you are migrating to new version do not forget do the following:
# su -m gvm -c "gvmd --migrate"
Basic instructions for configure your gvm infraestruture are following:
1) Redis is a dependency of GVM. Please, configure redis-server for
listening on socket /var/run/redis/redis.sock. security/openvas scanner
needs it
# echo "db_address = /var/run/redis/redis.sock" > /usr/local/etc/openvas/openvas.conf
2) Mosquitto broker is a new dependency of GVM. Please configure net/mosquitto
service and add the following line to openvas configuration file
# echo "mqtt_server_uri = localhost:1883" >> /usr/local/etc/openvas/openvas.conf
3) security/py-notus-scanner is a new tool used by GVM. You must create a
notus-scanner.toml configuration file at usr/local/etc/gvm/ directory
# echo "[notus-scanner]" > /usr/local/etc/gvm/notus-scanner.toml
# echo 'mqtt-broker-address = "localhost"' >> /usr/local/etc/gvm/notus-scanner.toml
# echo 'mqtt-broker-port = "1883"' >> /usr/local/etc/gvm/notus-scanner.toml
# echo 'products-directory = "/var/lib/notus/products"' >> /usr/local/etc/gvm/notus-scanner.toml
# echo 'log-level = "INFO"' >> /usr/local/etc/gvm/notus-scanner.toml
# echo "disable-hashsum-verification = false" >> /usr/local/etc/gvm/notus-scanner.toml
Otherwise it can be defined into notus-scanner startup script. Take a look at
/usr/local/etc/rc.d/notus-scanner file
4) Add user gvm to redis group
# pw groupmod redis -M gvm
5) security/gvmd uses PostgreSQL database (server and contrib). Generally,
PostgreSQL must be installed in the same server where security/gvmd is running:
# su postgres
# createuser -DRS gvm
# createdb -O gvm gvmd
# psql gvmd
# create role dba with superuser noinherit;
# grant dba to gvm;
# create extension "uuid-ossp";
# create extension "pgcrypto";
# create extension "pg-gvm";
6) Add the following lines to /etc/rc.conf
# sysrc redis_enable="YES"
# sysrc gvmd_enable="YES"
# sysrc ospd_openvas_enable="YES"
# sysrc notus_scanner_enable="YES"
# sysrc gsad_enable="YES"
7) Start redis service
# service redis start
8) Currently, ospd_openvas should run as a user without elevated privileges
(gvm) and use sudo for run openvas scanner but it does not work properly.
Like a workaround you must run redis as root and the same with ospd_openvas.
Add the following lines to /etc/rc.conf
redis_user="root"
ospd_openvas_user="root"
Take in mind it is not the best configuration for run ospd_openvas and
openvas.
The following could avoid some scan issues with openvas
# echo "test_alive_hosts_only = no" >> /usr/local/etc/openvas/openvas.conf
9) The following steps are neccessary before of you can access to GVM web
interface (gsad):
Create certificates
# su -m gvm -c "gvm-manage-certs -a"
Sync gvmd Data, SCAP, CERT and NVT
# su -m gvm -c "greenbone-nvt-sync"
# su -m gvm -c "greenbone-feed-sync --type GVMD_DATA"
# su -m gvm -c "greenbone-feed-sync --type SCAP"
# su -m gvm -c "greenbone-feed-sync --type CERT"
Start gvmd service. It will listen on /var/run/gvmd/gvmd.sock by default
# service gvmd start
Create an admin user and set the Feed Import Owner
# su -m gvm -c "gvmd --create-user=myuser"
# su -m gvm -c "gvmd --user=myuser --new-password=yourpassword"
Set the Feed Import Owner (myuser user in this example)
# su -m gvm -c "gvmd --get-users --verbose"
myuser <uuid_of_user>
# su -m gvm -c "gvmd --modify-setting 78eceaec-3385-11ea-b237-28d24461215b --value <uuid_of_user>
10) Start OSPD-OpenVAS Wrapper service. It will listen on /var/run/ospd/ospd.sock by default
# service ospd_openvas start
you can test if ospd_openvas is connecting with openvas scanner with the following commands:
# su -m gvm -c "gvmd --get-scanners"
6acd0832-df90-11e4-b9d5-28d24461215b CVE 0 CVE
08b69003-5fc2-4037-a479-93b440211c73 OpenVAS /var/run/ospd/ospd.sock 0 OpenVAS Default
# su -m gvm -c "gvmd --verify-scanner=08b69003-5fc2-4037-a479-93b440211c73"
Scanner version: OpenVAS x.x.x
11) Start Notus Scanner service
# service notus_scanner start
12) Start GVM web interface. It will listen on http://127.0.0.1 by default
# service gsad start
13) Some openvas scanner tasks need access to /dev/bpf device. Add the
following lines to /etc/devfs.conf
own bpf root:gvm
perm bpf 0660
And restart service for apply the changes
# service devfs restart
14) gvm log files are stores to /var/log/gvm directory
15) gsad can export results to PDF. It needs print/tex-xetex port
# pkg install tex-xetex
16) If you need more configure information you can look at the following links:
https://github.com/greenbone/gvmd/blob/master/INSTALL.md
https://github.com/greenbone/openvas/blob/master/INSTALL.md
https://github.com/greenbone/ospd/blob/master/doc/INSTALL-ospd-scanner.md
https://github.com/greenbone/gsa/blob/master/INSTALL.md
https://github.com/greenbone/greenbone-feed-sync/blob/main/README.md
https://greenbone.github.io/docs/latest/index.html
and
# gvmd -h
# openvas -h
# ospd-openvas -h
# notus-scanner -h
# gsad -h
14) Enjoy it
- Master Sites:
- There is no master site for this port.
|
Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
23.10.0 20 Sep 2024 06:34:30 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: Update to 23.10.0
- security/gsa: update to 23.3.0
- security/gsad: update to 22.12.0
- security/gvm-libs: update to 22.12.1
- security/gvmd: update to 23.10.0
- security/openvas: update to 23.9.0 [1]
- security/py-gvm-tools: update to 24.8.0
- security/py-notus-scanner: update to 22.6.4
- security/py-python-gvm: update to 24.8.0
- security/py-greenbone-feed-sync: update to 24.3.0
PR: 281414
Reported by: wen [1] |
23.5.2_1 20 May 2024 10:33:03 |
Vsevolod Stakhov (vsevolod) |
security/libsodium: update to 1.0.19, bump dependent ports
PR: 278259
Reported by: Andrey Korobkov <alster-vinterdalen.se> |
23.5.2 24 Apr 2024 22:30:12 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 23.5.2
- databases/pg-gvm: update to 22.6.5
- security/gsa: update to 23.0.0
- security/gsad: update to 22.9.1
- security/gvm-libs: update to 22.9.1
- security/gvmd: update to 23.5.2
- security/openvas: update to 23.0.1
- security/py-gvm-tools: update to 24.3.0
- security/py-notus-scanner: update to 22.6.3
- security/py-ospd-openvas: update to 22.7.1
- security/py-python-gvm: update to 24.3.0
- security/py-greenbone-feed-sync: update to 24.3.0 |
23.2.0 27 Jan 2024 00:47:49 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 23.2.0
- databases/pg-gvm: update to 22.6.4
- security/gsa: update to 23.0.0
- security/gsad: update to 22.9.0
- security/gvm-libs: update to 22.8.0
- security/gvmd: update to 23.2.0
- security/openvas: update to 22.7.9
- security/py-gvm-tools: update to 24.1.0
- security/py-notus-scanner: update to 22.6.2
- security/py-ospd-openvas: update to 22.6.2
- security/py-python-gvm: update to 24.1.0
- security/py-greenbone-feed-sync: update to 23.10.0 |
22.9.0_1 21 Oct 2023 01:16:40 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: Update entry about pdf exporting from gsad |
22.9.0_1 20 Oct 2023 23:50:29 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: Update gvm-libs to 22.7.3 and openvas to 22.7.6
- Bump PORTREVISION
- Update security/py-python-gvm to 23.10.0
- Fix issues with config path of security/py-notus-scanner and
security/py-greenbone-feed-sync [1]
- Improve pkg-message.in from security/gvm [1]
Reported by: Luciano Mannucci <luciano at_ vespaperitivo.it> [1] |
22.9.0 02 Oct 2023 17:18:12 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 22.9.0
- databases/pg-gvm: update to 22.6.1
- security/gsa: update to 22.7.1
- security/gsad: update to 22.6.0
- security/gvm-libs: update to 22.7.1
- security/gvmd: update to 22.9.0
- security/openvas: update to 22.7.5
- security/py-gvm-tools: update to 23.9.0
- security/py-notus-scanner: update to 22.6.0
- security/py-ospd-openvas: update to 22.6.0
- security/py-python-gvm: update to 23.5.1 |
22.7.0 27 Jun 2023 19:34:34 |
Rene Ladan (rene) |
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568> |
22.7.0 18 May 2023 20:40:13 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: Update to 22.7.0
- security/gvm-libs: Update to 22.6.0
- security/gvmd: Bump PORTREVISION
- security/openvas: Update to 22.7.0
- security/py-notus-scanner: Update to 22.5.0
- security/py-ospd-openvas: Update to 22.5.1
- security/gsa: Bump PORTREVISION
- security/gsad: Bump PORTREVISION
- security/py-gvm-tools: Update to 23.4.0
- security/py-python-gvm: Update to 23.5.0 |
22.4.1 02 Apr 2023 22:55:36 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: Update to 22.4.1 |
22.4.0_4 30 Oct 2022 23:05:16 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: Fix issues with newer version of glib2/pcre2
PR: 267429
Reported by: freebsd _at_ ny-central.org, andrew _at_ tekrealm.net
Obtained from: https://github.com/greenbone/gvmd/pull/1867/files |
07 Sep 2022 21:58:51 |
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
22.4.0_3 07 Sep 2022 21:10:59 |
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above ) |
22.4.0_3 27 Aug 2022 23:38:36 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: py-ospd-openvas, py-note-scanner and py-python-gvm ports were
updated
- Bump PORTREVISION |
22.4.0_2 13 Aug 2022 18:51:14 |
Matthias Andree (mandree) |
*: bump PORTREVISION of all devel/xxhash users...
...except archivers/py-borgbackup, which requires a more complete fix. |
22.4.0_1 09 Aug 2022 21:58:26 |
Jose Alonso Cardenas Marquez (acm) |
security/openvas: Fix build on some 13.x and 14-CURRENT
- Bump PORTREVISION
Reported by: pkg-fallout |
22.4.0 01 Aug 2022 20:58:04 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 22.4.0
- Add security/py-notus-scanner like a dependency
- Modify pkg-message to newest way to config gvm suite |
21.4.4 22 May 2022 05:42:11 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 21.4.4
- security/openvas update to 21.4.4
- security/gvmd update to 21.4.5
- security/gvm-libs update to 21.4.4
- security/py-ospd-openvas update to 21.4.4
- security/py-python-gvm update to 21.11.0
- security/gsad was added
- security/gsa was added
- security/py-ospd was removed. Now it is part of security/py-osdp-openvas port
- security/greenbone-security-assistant was removed. gsad and gsa ports was
added instead of it |
21.4.3 01 Apr 2022 15:09:49 |
Dmitry Marakasov (amdmi3) |
*/*: fix trailing whitespace in pkg-descr's
Approved by: portmgr blanket |
21.4.3 05 Nov 2021 16:32:20 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 21.4.3
The following ports part of security gvm were updated
security/gvmd: Update to 21.4.4
security/gvm-libs: Update to 21.4.3
security/openvas: Update to 21.4.3
security/py-ospd-openvas: Update to 21.4.3
security/py-ospd: Update to 21.4.4
security/greenbone-security-assistant: Update to 21.4.3
security/py-gvm-tools: Update to 21.10.0
security/py-python-gvm: Update to 21.10.0 |
21.4.2 05 Sep 2021 02:11:19 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 21.4.2
The following ports part of security gvm were updated
security/gvmd: Update to 21.4.3
security/gvm-libs: Update to 21.4.2
security/openvas: Update to 21.4.2
security/py-ospd-openvas: Update to 21.4.2
security/py-ospd: Update to 21.4.3
security/greenbone-security-assistant: Update to 21.4.2
- Fix build on FreeBSD 11 [1]
PR: 257653
Reported by: John Hein <jcfyecrayz _ at _ liamekaens.com> [1] |
21.4.1 09 Jul 2021 18:35:54 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: update to 21.4.1
The following ports part of security gvm were updated
security/gvmd: Update to 21.4.2
security/gvm-libs: Update to 21.4.1
security/openvas: Update to 21.4.1
security/py-ospd-openvas: Update to 21.4.1
security/py-ospd: Update to 21.4.1
security/greenbone-security-assistant: Update to 21.4.1
security/py-python-gvm: Update to 21.6.0
security/py-gvm-tools: Update to 21.6.1 |
21.4.0 18 Jun 2021 07:11:58 |
Jose Alonso Cardenas Marquez (acm) |
security/gvm: Update to 21.4.0
The following ports part of security gvm were updated
security/gvmd: Update to 21.4.0
security/gvm-libs: Update to 21.4.0
security/openvas: Update to 21.4.0
security/py-ospd-openvas: Update to 21.4.0
security/py-ospd: Update to 21.4.0
security/greenbone-security-assistant: Update to 21.4.0
security/py-python-gvm: Update to 21.5.2
security/py-gvm-tools: Update to 21.6.0
Notable Changes in this Release
(Only the first 15 lines of the commit message are shown above ) |
20.8.1 07 Apr 2021 08:09:01 |
Mathieu Arnold (mat) |
One more small cleanup, forgotten yesterday.
Reported by: lwhsu |
20.8.1 06 Apr 2021 14:31:07 |
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
20.8.1 18 Feb 2021 21:00:13 |
acm |
- Update gvm ports to 20.8.1
ChangeLog at: https://github.com/greenbone/gvmd/releases/tag/v20.8.1
https://github.com/greenbone/openvas-scanner/releases/tag/v20.8.1
https://github.com/greenbone/gsa/releases/tag/v20.8.1
https://github.com/greenbone/ospd-openvas/releases/tag/v20.8.1
https://github.com/greenbone/gvm-libs/releases/tag/v20.8.1 |
20.8.0_2 19 Jan 2021 01:07:09 |
acm |
- Improve pkg-message info
- Bump PORTREVISION |
20.8.0_1 07 Jan 2021 03:32:27 |
acm |
- pkg-message clean up |
20.8.0 06 Jan 2021 10:11:55 |
antoine |
Remove python 2.7 support from newly added ports |
20.8.0 06 Jan 2021 09:17:33 |
acm |
- New port: security/gvm
This is the metaport to install GVM applications and libraries.
WWW: https://www.openvas.org/ |