Default configurations? (gsad, gvmd)

Luminarie · January 23, 2020, 2:22pm

Hi! I’ve recently installed OpenVAS from source following instructions from this site:

https://sadsloth.net/post/install-gvm11-src-on-debian/

The tool works well as installed (standalone scanner); I’m currently working on configuring a distributed installation, while learning about GVM’s architecture and small itty bitty details.

As an example, I’m needing to configure GVMD to listen on TCP so that it can be queried remotely. I ended up doing that in the service unit with the --listen and -port flags, and it worked fine.
I then needed to point GSAD to find where the manager was listening, so I set the --mlisten and --mport flags, and that also worked.

However, while I was trying to figure that out, I spent a quite some time trying to find where the bare default configurations for these two where. I’m kinda looking for something similar to the output you get from running “openvas -s”, but for GSAD and GVMD.

That is, is there anywhere I can see the configs both of these apply when you run them without any flags at all? Have I missed any obvious config files? Are those set during compile? If so, is there anywhere in the source files I should be looking for them?

Thanks ^_^.

GVM versions

gsa: 9.0.0 (‘gsad --version’)
gvm: 9.0.1 (‘gvmd --version’)
gvm-libs: 11.0.0

Environment

Operating system: Debian 10.2
Kernel: 4.19.0-6-amd64 (‘uname -a’)
Installation method / source: Manual from Source / Git

brian · January 28, 2020, 9:25am

Not quite sure if this is correct since I haven’t tried installing GVM11 from source, but on OpenVAS 9 the default configuration for GSA and Manager is located at /etc/default. openvas-gsa and openvas-manager specifically.

bricks · January 28, 2020, 9:35am

There is no similar option like -s for gsad and gvmd. You have to look at the output of --help or the source code directly. E.g. for gsad you can take a look at the main function

github.com

greenbone/gsa/blob/master/gsad/src/gsad.c#L2714




/**
 * @brief Main routine of Greenbone Security Assistant daemon.
 *
 * @param[in]  argc  Argument counter
 * @param[in]  argv  Argument vector
 *
 * @return EXIT_SUCCESS on success, else EXIT_FAILURE.
 */
int
main (int argc, char **argv)
{
  gchar *rc_name;
  int gsad_port;
  int gsad_redirect_port = DEFAULT_GSAD_REDIRECT_PORT;
  int gsad_manager_port = DEFAULT_GVM_PORT;
  sigset_t sigmask_all, sigmask_current;


  /* Initialise. */


  if (gsad_init () == MHD_NO)

Luminarie · January 28, 2020, 2:45pm

Hey all, thanks for the input. I had been looking at the wrong source files apparently (not a programmer, doing ma best :P).

I found this for GSAD:

github.com

greenbone/gsa/blob/919cc923bcbe2e9fba6eb31081cdeb5fb471a114/gsad/src/gsad.c#L120


#define DEFAULT_GSAD_HTTPS_PORT 443


/**
 * @brief Fallback GSAD port for HTTP.
 */
#define DEFAULT_GSAD_HTTP_PORT 80


/**
 * @brief Fallback unprivileged GSAD port.
 */
#define DEFAULT_GSAD_PORT 9392


/**
 * @brief Fallback GSAD port.
 */
#define DEFAULT_GSAD_REDIRECT_PORT 80


/**
 * @brief Fallback Manager port.
 */
#define DEFAULT_GVM_PORT 9390

And for GVMD:

github.com

greenbone/gvmd/blob/4b2c7c2595c7808f4ae5b558bb0c57788953cd91/src/gvmd.c#L171


*/
#ifndef CLIENTKEY
#define CLIENTKEY  "/var/lib/openvas/private/CA/clientkey.pem"
#endif


/**
* @brief Manager port.
*
* Used if /etc/services "otp" and --port are missing.
*/
#define GVMD_PORT 9390


/**
* @brief Second argument to `listen'.
*/
#define MAX_CONNECTIONS 512


/**
* @brief Default value for client_watch_interval
*/
#define DEFAULT_CLIENT_WATCH_INTERVAL 1

Which answers my question, and quite a couple others I had (in particular default SSL paths, and some other configs for each daemon).

Thanks ^_^.