OpenVAS on Ubuntu 18.04: what's the correct way?

Well, in that case that means you need to run gsad as root. Which is against all basics security best practice (and btw not recommended as discussed in this post: Running openvas as a non privileged user?).

Sounds like an unsecure configuration to me.