#!/bin/sh
#
# (c) 2016 Francesco Colista
# fcolista@alpinelinux.org
#
# Configure metasploit to run as $USER
#
echo "*** METASPLOIT INSTALL FOR ALPINE LINUX ***"
echo 
echo "==> Account configuration."
echo "Username : "
read USER
adduser $USER
echo 
echo "The user $USER will be automatically added among sudoers with all permissions"
echo
echo "$USER	ALL=(ALL:ALL) ALL" >> /etc/sudoers

apk update && apk upgrade
apk add --progress alpine-sdk ruby-dev libffi-dev\
	openssl-dev readline-dev sqlite-dev \
	autoconf bison libxml2-dev postgresql-dev \
	libpcap-dev yaml-dev subversion git sqlite ruby-webrobots \
	ruby-bundler zlib-dev ruby-io-console ruby-nokogiri \
	ruby-activesupport4.2 ruby-activerecord4.2 ruby-bigdecimal \
	ncurses ncurses-dev nmap

gem install --no-rdoc --no-ri wirble sqlite3 bundler

mkdir -p /opt && cd /opt

git clone https://github.com/rapid7/metasploit-framework.git

cd metasploit-framework

cat - <<-EOF | su $USER
mkdir /home/$USER/.msf4
mkdir /home/$USER/.bundle
bundle install
EOF

for MSF in $(ls msf*); do 
	if ! [ -L /usr/local/bin/$MSF ]; then
		ln -s /opt/metasploit-framework/$MSF /usr/local/bin/$MSF;
	fi
done

echo " ==> Database configuration "
echo
echo " DB User : "; read DBUSER
echo " DB Password : "; read DBPASS
echo " DB Name : "; read DBNAME

echo "Those are the settings you choosed: "
echo "DBUser: $DBUSER"
echo "DBPass: $DBPASS"
echo "DBName: $DBNAME"
echo
echo "Should I go ahead? "

read -p "Continue (y/n)?" C
if [ "$C" == "n" ]; then
  exit 1
fi

# Configuration
/etc/init.d/postgresql setup
/etc/init.d/postgresql start

psql -U postgres -c "CREATE USER $DBUSER WITH PASSWORD '"$DBPASS"' ;"
psql -U postgres -c "CREATE DATABASE $DBNAME OWNER $DBUSER;"
psql -U postgres -c "grant ALL ON DATABASE $DBNAME TO $DBUSER;"

# Workaround stated in http://stackoverflow.com/questions/25392268/cant-load-metasplot-after-istallation
chmod o+r /usr/lib/ruby/gems/2.2.0/gems/robots-0.10.1/lib/robots.rb

cat<<'EOF'>/home/$USER/.msf4/database.yml
production:
 adapter: postgresql
 database: $DBNAME
 username: $DBUSER
 password: $DBPASS
 host: 127.0.0.1
 port: 5432
 pool: 75
 timeout: 5
EOF

cat - <<-EOF | su $USER
msfconsole -x "db_connect $DBUSER:$DBPASS@127.0.0.1:5432/$DBNAME"
msfconsole -x "db_status"
EOF
	

#!/bin/sh
# It's better to have dmesg logging in a human readable way
base=$(cut -d '.' -f1 /proc/uptime); 
seconds=$(date +%s); 
dmesg | sed 's/\]//;s/\[//;s/\([^.]\)\.\([^ ]*\)\(.*\)/\1\n\3/' | 
while read first; do 
  read second; 
  first=`date +"%d/%m/%Y %H:%M:%S" --date="@$(($seconds - $base + $first))"`;
  printf "[%s] %s\n" "$first" "$second";	

#!/bin/sh
#
# Simple script used to get the latest laTeX package working with Alpine
# It assumes that testing repository is already added.
# If not:
# echo "http://dl-cdn.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories && apk update
# 
# (c) 2017 Francesco Colista 
# Email: fcolista@alpinelinux.org
#

TMP="/tmp/tlxmgr-install"
URL="ftp://ftp.tug.org/historic/systems/texlive/$(date +%Y)/"

apk info -qe texlive-full || apk add texlive-full
apk info -qe curl || apk add curl

mkdir -p $TMP && cd $TMP

curl -s $URL > /dev/null
if [ $? -ne "0" ]; then
  URL="ftp://ftp.tug.org/historic/systems/texlive/$(date --date '-1 year' +%Y)/"
fi

latest_tlmgr=$(curl -s $URL | grep texmf | grep -v sha | awk '{print $9}')
latest_tlmgr_sum=$(curl -s $URL | grep texmf | grep sha512 | head -1 | awk '{print $9}' )

echo "Downloading the latest texlive-full package ..."
wget -q ${URL}${latest_tlmgr}
wget -q ${URL}${latest_tlmgr_sum}

echo "Checking integrity of $latest_tlmgr ..."
sha512sum -c $TMP/$latest_tlmgr_sum || ( echo "$latest_tlmgr is corrupted, download it again."; exit 1 )

tar -C /usr/share --strip-components=1 -xvf $latest_tlmgr
apk fix texlive
rm -rf $TMP
	

#!/bin/sh
#
# Script for automatic Database setup for Icingaweb2, designed for Alpine Linux (https://www.alpinelinux.org)
# (c) 2017 Francesco Colista 
# Email: fcolista@alpinelinux.org
#

configure_icinga2() {
	db=$1
	dbcaps=$(echo $db | cut -c1 | tr a-z A-Z)$(echo $db | cut -c2-)

	if ! [ -f /etc/icinga2/features-enabled/ido-$db ]; then
		echo "Looks that IDO feature is not enable for $db. I'm enabling it in your behalf.."
		icinga2 feature enable ido-$db
		rc-service icinga2 restart
	fi

	echo " ==> Updating $dbcaps DB configuration for Icinga2 ..."
	cat>/etc/icinga2/features-enabled/ido-$db.conf<
	

#!/bin/sh
#
#
# Script for automatic webserver setup for Icingaweb2, designed for Alpine Linux (https://www.alpinelinux.org)
# (c) 2017 Francesco Colista 
# Email: fcolista@alpinelinux.org
#

icingaweb2_path="/usr/share/webapps/icingaweb2/public"
icingaweb2conf_path="/etc/icingaweb2"

configure_icinga2() {
	local web=$1
	local conf=$2
	echo -e "\n ==> Configuring $web web server .... \n"
	case $web in
		apache*)
			icingacli setup config webserver apache --document-root $icingaweb2_path > $conf
			sed -i -e "s/^#.*rewrite_module/LoadModule rewrite_module/" /etc/apache2/httpd.conf
			rc-service apache2 status || rc-service apache2 restart
			;;
		nginx*)
			read -p "Warning: this setup disable the default.conf in nginx and autoconfigure php-fpm with ngixn user. Should I continue? [Y/N]" yn
			case $yn in
				[Yy]*) mv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.disabled
				sed -i -e "s/user.*/user\ =\ nginx/g" /etc/php5/php-fpm.conf
				sed -i -e "s/group.*/group\ =\ icingaweb2/g" /etc/php5/php-fpm.conf
				;;
				[Nn]*) echo -e "\nYou should fix manually $conf file in order to let nginx start without issues\n" ;;
			esac
			cat>$conf<> $lighttpd_conf

			cat>$conf< "$icingaweb2_path/" )

\$HTTP["url"] =~ "^/icingaweb2" {
	server.document-root = "$icingaweb2_path"
	setenv.add-environment = ("ICINGAWEB_CONFIGDIR" => "$icingaweb2conf_path")
	server.follow-symlink = "enable"
	}

	url.rewrite = ( "^/icingaweb2/(img|font)/(.*)?" => "\$0",
			"^/icingaweb2/(.*)(\?(.*)=(.*))" => "/icingaweb2/index.php?\$3=\$4",
			"^/icingaweb2/(.*)?" => "/icingaweb2/index.php/" )
EOF
		;;
	esac
}


check() {
	apk info -q -e icingaweb2 
	if [ $? -ne "0" ]; then
		echo -e "\nIcingaweb2 is not installed. Install it first, then re-run the script.\n"; 
		exit 1
	fi
}

# Main starts here

check
while true; do
	echo 
	read -p " ==> Which webserver do you want to use? [A]pache, [N]ginx or [Lighttpd] ? " c
	
	case $c in
		[Aa]*) 
			apk info -e apache2 || apk add apache2
			apk info -e php5-apache2 || apk add php5-apache2
			webserver="apache"
			conffile="/etc/apache2/conf.d/icingaweb2.conf"
			break
			;;
		[Nn]*) 
			apk info -e php5-fpm || apk add php5-fpm
			apk info -e nginx || apk add nginx
			webserver="nginx"
			conffile="/etc/nginx/conf.d/icingaweb2.conf"
			break
			;;
		[Ll]*)
			apk info -e php5-cgi || apk add php5-cgi
			apk info -e lighttpd || apk add lighttpd
			webserver="lighttpd"
			conffile="/etc/lighttpd/icingaweb2.conf"
			break
			;;
		*) 	echo -e "\n ==> Please choose [A]pache, [N]ginx or [L]ighttpd : " 
			;;
	esac
done

adduser $webserver icingaweb2
# Add the web server user to the icingacmd group in order to grant it write permissions to the external command pipe and livestatus socket:
adduser $webserver icingacmd

chown $webserver:icingaweb2 -R $icingaweb2_path/*
chown $webserver:icingaweb2 -R $icingaweb2conf_path/*
chmod 755 -R $icingaweb2_path/*

configure_icinga2 $webserver $conffile

icingacli setup token create && icingacli setup token show

echo " ==> Open your browser to your webserver pointing to the path: /icingaweb2 "
echo " ==> Paste the previously generated token and follow the steps on-screen."

	

#!/bin/sh

# OpenVAS
# $Id$
# Description: Script for checking completeness and readiness
# of OpenVAS.
# Reviewed for Alpine Linux distribution by:
# Francesco Colista 
#
# Authors:
# Jan-Oliver Wagner 
# Michael Wiegand 
#
# Copyright:
# Copyright (C) 2011-2015 Greenbone Networks GmbH
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2,
# or at your option any later version, as published by the
# Free Software Foundation
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

LOG=/tmp/openvas-check-setup.log

# Current default is OpenVAS-9:
VER=$(apk info -d openvas-libraries | cut -d- -f3 | head -1 | cut -d. -f1)
SCANNER_MAJOR=$(apk info -v | grep openvas-scanner | cut -d- -f3 | cut -d. -f1)
SCANNER_MINOR=$(apk info -v | grep openvas-scanner | cut -d- -f3 | cut -d. -f2)
MANAGER_MAJOR=$(apk info -v | grep openvas-manager | cut -d- -f3 | cut -d. -f1)
MANAGER_MINOR=$(apk info -v | grep openvas-manager | cut -d- -f3 | cut -d. -f2)
GSA_MAJOR=$(apk info -v | grep greenbone | cut -d- -f4 | cut -d. -f1)
GSA_MINOR=$(apk info -v | grep greenbone | cut -d- -f4 | cut -d. -f2)
CLI_MAJOR=$(apk info -v | grep openvas-cli | cut -d- -f3 | cut -d. -f1)
CLI_MINOR=$(apk info -v | grep openvas-cli | cut -d- -f3 | cut -d. -f2)

# Colorize output for a better reading
ERROR=$(echo -en "\033[1;91m ERROR: \e[0m")
OK=$(echo -en "\e[0;32m OK: \e[0m")
FIX=$(echo -en "\e[33m FIX: \e[0m")
WARNING=$(echo -en "\e[93m WARNING: \e[0m")
SUGGEST=$(echo -en "\e[33m SUGGEST: \e[0m")
HINT=$(echo -en "\e[33m HINT: \e[0m")
CHECKING=$(echo -en "\e[96m CHECKING: \e[0m")

echo ""
echo "  Test completeness and readiness of OpenVAS-$VER"
echo ""
echo " =] Script based on original openvas-check-setup script and adjusted for Alpine Linux [= "
echo ""

log_and_print() {
  echo -e "       " $1
  echo -e "       " $1 >> $LOG
}

check_package() {
  apk info -eq $1 && return 0 || return 1
}

check_failed() {
  echo ""
  echo " $ERROR: Your OpenVAS-$VER installation is not yet complete!"
  echo ""
  echo "Please follow the instructions marked with FIX above and run this"
  echo "script again."
  echo ""
  exit 1
}

# LOG start
echo "$0 " > $LOG
echo "  Mode:  $MODE" >> $LOG
echo "  Date: " `date -R` >> $LOG
echo "" >> $LOG

echo "$CHECKING for enabled repositories for OpenVAS ... "
if ! $(grep -q testing /etc/apk/repositories); then
  log_and_print "$ERROR: No testing repository enabled.";
  log_and_print "$FIX: Please add testing repository ." ;
  cat <> /etc/apk/repositories
  * apk update
EOF
fi

echo "$CHECKING OpenVAS Scanner ... "
echo "$CHECKING presence of OpenVAS Scanner ..." >> $LOG
if ! $(check_package openvas-scanner); then
  log_and_print "$ERROR: No OpenVAS Scanner (openvassd) found.";
  log_and_print "$FIX: Please install OpenVAS Scanner." ;
  log_and_print "$FIX: apk add openvas-scanner" ;
  check_failed
fi
echo "" >> $LOG

echo "$CHECKING OpenVAS Scanner version ..." >> $LOG

VERSION=$(openvassd --version 2>>$LOG | head -1 | sed -e "s/OpenVAS Scanner //")
echo "" >> $LOG

log_and_print "$OK: OpenVAS Scanner is present in version $VERSION."

openvassd -s >> $LOG 2>&1

echo "$CHECKING OpenVAS Scanner CA cert ..." >> $LOG
CAFILE=`openvassd -s 2>>$LOG | grep ca_file | sed -e "s/^ca_file = //"`
if [ ! -e $CAFILE ]; then
  log_and_print "$ERROR: No CA certificate file of OpenVAS Scanner found."
  log_and_print "$FIX: Run 'openvas-manage-certs -a'."
  check_failed
fi
echo "" >> $LOG

log_and_print "$OK: OpenVAS Scanner CA Certificate is present as $CAFILE."

echo "$CHECKING presence of redis ..." >> $LOG
if ! $(check_package redis); then
  log_and_print "$ERROR: No redis-server installation found.";
  log_and_print "$FIX: You should install redis-server for improved scalability and ability to trace/debug the KB";
  check_failed
else
  VERSION=`redis-server --version | awk '{ print $3 }'`
  log_and_print "$OK: redis-server is present in version $VERSION."
  HAVE_REDIS=1
fi
echo "" >> $LOG

if [ $HAVE_REDIS -eq "1" ]; then
  echo "$CHECKING if redis-server is configured properly to run with openVAS ..." >> $LOG
  REDISSOCKET=`openvassd -s 2>>$LOG | grep kb_location | sed -e "s/^kb_location = //"`
  if [ -z "$REDISSOCKET" ]; then
     log_and_print "$ERROR: scanner is not configured to use a redis-server socket."
     log_and_print "$FIX: Configure the kb_location setting of the scanner to the path of the redis-server socket."
     check_failed
  else
    log_and_print "$OK: scanner (kb_location setting) is configured properly using the redis-server socket: $REDISSOCKET"
    echo "$CHECKING if redis-server is running ..." >> $LOG
    if [ -e $REDISSOCKET ]; then
      log_and_print "$OK: redis-server is running and listening on socket: $REDISSOCKET."
    else
      log_and_print "$ERROR: redis-server is not running or not listening on socket: $REDISSOCKET"
      log_and_print "$FIX: Please read the instruction in the README.alpine: /usr/share/doc/openvas-scanner/README.alpine"
      check_failed
    fi
  fi
  log_and_print "$OK: redis-server configuration is OK and redis-server is running."
fi

echo "" >> $LOG

echo "$CHECKING NVT collection ..." >> $LOG
PLUGINSFOLDER=`openvassd -s 2>>$LOG | grep plugins_folder | sed -e "s/^plugins_folder = //"`
if [ ! -d $PLUGINSFOLDER ]; then
  log_and_print "$ERROR: Directory containing the NVT collection not found."
  log_and_print "$FIX: Run a NVT synchronization script like openvas-nvt-sync or greenbone-nvt-sync."
  check_failed
fi
OLDPLUGINSFOLDER=`echo "$PLUGINSFOLDER" | grep -q -v "/var/" 2>&1`
if [ $? -eq "0" ]; then
  CONFFILE=`openvassd -s 2>>$LOG | grep config_file | sed -e "s/^config_file = //"`
  log_and_print "$ERROR: Your OpenVAS Scanner configuration seems to be from a pre-OpenVAS-4 installation and contains non-FHS compliant paths."
  log_and_print "$FIX: Delete your OpenVAS Scanner Configuration file ($CONFFILE)."
  check_failed
fi
NVTCOUNT=`find $PLUGINSFOLDER -name "*nasl" | wc -l`
if [ $NVTCOUNT -lt "10" ]; then
  log_and_print "$ERROR: The NVT collection is very small."
  log_and_print "$FIX: Run greenbone-nvt-sync synchronization script."
  check_failed
fi
echo "" >> $LOG

log_and_print "$OK: NVT collection in $PLUGINSFOLDER contains $NVTCOUNT NVTs."

echo "$CHECKING status of signature checking in OpenVAS Scanner ..." >> $LOG
NOSIGCHECK=`openvassd -s 2>>$LOG | grep nasl_no_signature_check | sed -e "s/^nasl_no_signature_check = //"`
if [ $NOSIGCHECK != "no" ]; then
  log_and_print "$WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner."
  log_and_print "$SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html)."
  log_and_print "$SUGGEST: Please run: sed -i -e \"s/nasl_no_signature_check.*/nasl_no_signature_check\=no/g\" /etc/openvas/openvassd.conf"
else
  log_and_print "$OK: Signature checking of NVTs is enabled in OpenVAS Scanner."
fi
echo "" >> $LOG

CACHEFOLDER=`openvassd -s 2>>$LOG | grep cache_folder | sed -e "s/^cache_folder = //"`
CACHECOUNT=`find $CACHEFOLDER -name "*nvti" | wc -l`
if [ $CACHECOUNT -lt $NVTCOUNT ]; then
  log_and_print "$WARNING: The initial NVT cache has not yet been generated."
  log_and_print "$SUGGEST: Start OpenVAS Scanner for the first time to generate the cache."
  log_and_print "$SUGGEST: Please run: rc-service openvassd create_cache && rc-service openvassd start";
else
  log_and_print "$OK: The NVT cache in $CACHEFOLDER contains $CACHECOUNT files for $NVTCOUNT NVTs."
fi
echo "" >> $LOG

echo "$CHECKING OpenVAS Manager ... "

echo "$CHECKING presence of OpenVAS Manager ..." >> $LOG
if ! $(check_package openvas-manager); then
  log_and_print "$ERROR: No OpenVAS Manager (openvasmd) found.";
  log_and_print "$FIX: Please install OpenVAS Manager.";
  log_and_print "$FIX: Please run: apk add openvas-manager";
  check_failed
fi
echo "" >> $LOG
VERSION=`openvasmd --version | head -1 | sed -e "s/OpenVAS Manager //"`
echo "" >> $LOG
log_and_print "$OK: OpenVAS Manager is present in version $VERSION."

echo "$CHECKING OpenVAS Manager client certificate ..." >> $LOG
CERTDIR=`dirname $CAFILE`
CLIENTCERTFILE="$CERTDIR/clientcert.pem"
if [ ! -e $CLIENTCERTFILE ]; then
  log_and_print "$ERROR: No client certificate file of OpenVAS Manager found."
  log_and_print "$FIX: Run 'openvas-manage-certs -a'."
  check_failed
fi
echo "" >> $LOG

log_and_print "$OK: OpenVAS Manager client certificate is present as $CLIENTCERTFILE."

echo "$CHECKING OpenVAS Manager database ..." >> $LOG
# Guess openvas state dir from $PLUGINSFOLDER
STATEDIR=`dirname $PLUGINSFOLDER`
TASKSDB="$STATEDIR/mgr/tasks.db"
if [ ! -e $TASKSDB ]; then
  log_and_print "$ERROR: No OpenVAS Manager database found. (Tried: $TASKSDB)"
  log_and_print "$FIX: Run 'openvasmd --rebuild' while OpenVAS Scanner is running."

  OPENVASSD_RUNNING=`ps -Af | grep -ic "[o]penvassd: waiting for incoming connections"`
  if [ $OPENVASSD_RUNNING -eq "0" ]; then
    log_and_print "$WARNING: OpenVAS Scanner is NOT running!" ;
    log_and_print "$SUGGEST: Start OpenVAS Scanner (openvassd)." ;
    log_and_print "$SUGGEST: Please run: rc-service openvassd start" ;
  fi
  check_failed
fi
echo "" >> $LOG

log_and_print "$OK: OpenVAS Manager database found in $TASKSDB."

echo "$CHECKING access rights of OpenVAS Manager database ..." >> $LOG
TASKSDBPERMS=`stat -c "%a" "$TASKSDB"`
if [ "$TASKSDBPERMS" != "600" ]; then
  log_and_print "$ERROR: The access rights of the OpenVAS Manager database are incorrect."
  log_and_print "$FIX: Run 'chmod 600 $TASKSDB'."
  check_failed
fi
echo "" >> $LOG

log_and_print "$OK: Access rights for the OpenVAS Manager database are correct."

echo "$CHECKING sqlite3 presence ..." >> $LOG

if $(check_package sqlite); then
  log_and_print "$OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled."
  HAVE_SQLITE=1
else
  log_and_print "$WARNING: Could not find sqlite3 binary, extended manager checks of the OpenVAS Manager installation are disabled.";  
  log_and_print "$SUGGEST: Please run: apk add sqlite"; 
  HAVE_SQLITE=0
fi
echo "" >> $LOG

if [ $HAVE_SQLITE -eq "1" ]; then
  echo "$CHECKING OpenVAS Manager database revision ..." >> $LOG
  TASKSDBREV=`sqlite3 $TASKSDB "select value from meta where name='database_version';"`
  if [ -z $TASKSDBREV ]; then
    log_and_print "$ERROR: Could not determine database revision, database corrupt or in invalid format."
    log_and_print "$FIX: Delete database at $TASKSDB and rebuild it."
    check_failed
  else
    log_and_print "$OK: OpenVAS Manager database is at revision $TASKSDBREV."
  fi
  echo "$CHECKING database revision expected by OpenVAS Manager ..." >> $LOG
  MANAGERDBREV=`openvasmd --version | grep "Manager DB revision" | sed -e "s/.*\ //"`
  if [ -z $MANAGERDBREV ]; then
    log_and_print "$ERROR: Could not determine database revision expected by OpenVAS Manager."
    log_and_print "$FIX: Ensure OpenVAS Manager is installed correctly."
    check_failed
  else
    log_and_print "$OK: OpenVAS Manager expects database at revision $MANAGERDBREV."
  fi
  if [ $TASKSDBREV -lt $MANAGERDBREV ]; then
    log_and_print "$ERROR: Database schema is out of date."
    log_and_print "$FIX: Run 'openvasmd --migrate'."
    check_failed
  else
    log_and_print "$OK: Database schema is up to date."
  fi
  echo "$CHECKING OpenVAS Manager database (NVT data) ..." >> $LOG
  DBNVTCOUNT=`sqlite3 $TASKSDB "select count(*) from nvts;"`
  if [ $DBNVTCOUNT -lt 20000 ]; then
    log_and_print "$ERROR: The number of NVTs in the OpenVAS Manager database is too low."
    log_and_print "$FIX: Make sure OpenVAS Scanner is running with an up-to-date NVT collection and run 'openvasmd --rebuild'."
    OPENVASSD_RUNNING=`ps -Af | grep -ic "[o]penvassd: waiting for incoming connections"`
    if [ $OPENVASSD_RUNNING -eq "0" ]; then
      log_and_print "$WARNING: OpenVAS Scanner is NOT running!" ;
      log_and_print "$SUGGEST: Start OpenVAS Scanner (openvassd)." ;
      log_and_print "$SUGGEST: Please run: rc-service openvassd start" ;
    fi
    check_failed
  else
    log_and_print "$OK: OpenVAS Manager database contains information about $DBNVTCOUNT NVTs."
  fi
fi

echo "$CHECKING if users exist ..." >> $LOG
USERCOUNT=`openvasmd --get-users | sed -e "/^$/d" | wc -l`
if [ $USERCOUNT -eq "0" ]; then
  log_and_print "$ERROR: No users found. You need to create at least one user to log in."
  log_and_print "       It is recommended to have at least one user with role Admin."
  log_and_print "$FIX: create a user by running 'openvasmd --create-user= --role=Admin && openvasmd --user= --new-password='"
  check_failed
else
  log_and_print "$OK: At least one user exists."
fi
echo "" >> $LOG

# TODO: Do a check for presence of at least one Admin user.

echo "$CHECKING OpenVAS SCAP database ..." >> $LOG
# Guess openvas state dir from $PLUGINSFOLDER
STATEDIR=`dirname $PLUGINSFOLDER`
SCAPDB="$STATEDIR/scap-data/scap.db"
if [ ! -e $SCAPDB ]; then
  log_and_print "$ERROR: No OpenVAS SCAP database found. (Tried: $SCAPDB)"
  log_and_print "$FIX: Run SCAP synchronization script : greenbone-scapdata-sync (will take a while...)"
  check_failed
fi
echo "" >> $LOG
log_and_print "$OK: OpenVAS SCAP database found in $SCAPDB."

echo "$CHECKING OpenVAS CERT database ..." >> $LOG
# Guess openvas state dir from $PLUGINSFOLDER
STATEDIR=`dirname $PLUGINSFOLDER`
CERTDB="$STATEDIR/cert-data/cert.db"
if [ ! -e $CERTDB ]; then
  log_and_print "$ERROR: No OpenVAS CERT database found. (Tried: $CERTDB)"
  log_and_print "$FIX: Run CERT synchronization script : greenbone-certdata-sync (will take a while)"
  check_failed
fi
echo "" >> $LOG
log_and_print "$OK: OpenVAS CERT database found in $CERTDB."

echo "$CHECKING xsltproc presence ..." >> $LOG
if ! $(check_package libxslt); then
  log_and_print "$WARNING: Could not find xsltproc binary, most report formats will not work."
  log_and_print "$SUGGEST: Install xsltproc."
  log_and_print "$SUGGEST: Please run: apk add xsltproc.";
else
  log_and_print "$OK: xsltproc found."
fi
echo "" >> $LOG

echo "$CHECKING status of password policy ..." >> $LOG
CONFFILE=`openvassd -s 2>>$LOG | grep config_file | sed -e "s/^config_file = //"`
CONFDIR=`dirname $CONFFILE`
grep -v "^[#]" $CONFDIR/pwpolicy.conf | grep -v "^$" > /dev/null 2>&1
if [ $? -ne "0" ]; then
  log_and_print "$WARNING: Your password policy is empty."
  log_and_print "$SUGGEST: Edit the $CONFDIR/pwpolicy.conf file to set a password policy."
  log_and_print "$SUGGEST: Please run: sed -i -e 's/^#\!\/\^.*/\!\/\^\.\{8,\}\$\//g' $CONFDIR/pwpolicy.conf && rc-service openvassd restart";
else
  log_and_print "$OK: The password policy file at $CONFDIR/pwpolicy.conf contains entries."
fi
echo "" >> $LOG

echo "$CHECKING Greenbone Security Assistant (GSA) ... "
echo "$CHECKING presence of Greenbone Security Assistant ..." >> $LOG
if ! $(check_package greenbone-security-assistant); then
  log_and_print "$ERROR: No Greenbone Security Assistant (gsad) found.";
  log_and_print: "$FIX: Please install Greenbone Security Assistant";
  log_and_print "$HINT: Please run: apk add greenbone-security-assistant.";
  check_failed
fi
echo "" >> $LOG

VERSION=`gsad --version | head -1 | sed -e "s/Greenbone Security Assistant //"`
echo "" >> $LOG
log_and_print "$OK: Greenbone Security Assistant is present in version $VERSION."

echo "$CHECKING OpenVAS CLI ... "
if ! $(check_package openvas-cli); then
  log_and_print "$ERROR: No OpenVAS CLI (omp) found.";
  log_and_print "$FIX: Please install OpenVAS CLI.";
  log_and_print "$HINT: Please run: apk add openvas-cli";
  check_failed
fi
echo "" >> $LOG
VERSION=`omp --version | head -1 | sed -e "s/OMP Command Line Interface //"`
echo "" >> $LOG
log_and_print "$OK: OpenVAS CLI version $VERSION."

echo "$CHECKING if OpenVAS services are up and running ... "

echo "$CHECKING netstat presence (not busybox) ..." >> $LOG
if ! [ -f /bin/netstat ]; then
  log_and_print "$WARNING: Could not find netstat binary, checks of the OpenVAS services are disabled."
  log_and_print "$SUGGEST: Install netstat."
  log_and_print "$SUGGEST: Please run: apk add net-tools"
  HAVE_NETSTAT=0
else
  log_and_print "$OK: netstat found, extended checks of the OpenVAS services enabled."
  HAVE_NETSTAT=1
fi
echo "" >> $LOG

echo "$CHECKING ps presence (not busybox) ..." >> $LOG
if ! [ -f /bin/ps ]; then
  log_and_print "$WARNING: Could not find ps binary, checks of the OpenVAS services are disabled."
  log_and_print "$SUGGEST: Install ps."
  log_and_print "$SUGGEST: Please run: apk add procps"
else
  log_and_print "$OK: ps found, extended checks of the OpenVAS services enabled."
fi
echo "" >> $LOG

if [ $HAVE_NETSTAT -eq "1" ]; then
  netstat -A inet -A inet6 -ntlp 2> /dev/null >> $LOG
  OPENVASMD_HOST=`netstat -antlp 2> /dev/null | grep openvasmd | awk -F\  '{print $4}' | awk -F: 'sub(FS $NF,x)'`
  OPENVASMD_PORT=`netstat -antlp 2> /dev/null | grep openvasmd | awk -F\  '{print $4}' | awk -F: '{print $NF}'`
  GSAD_HOST=`netstat -antlp 2> /dev/null | grep gsad | awk -F\  '{print $4}' | awk -F: 'sub(FS $NF,x)'`
  GSAD_PORT=`netstat -antlp 2> /dev/null | grep gsad | awk -F\  '{print $4}' | awk -F: '{print $NF}' | tail -1`

  case "$OPENVASMD_HOST" in
    "0.0.0.0"|"::") log_and_print "$OK: OpenVAS Manager is running and listening on all interfaces." ;;
    "127.0.0.1") log_and_print "$WARNING: OpenVAS Manager is running and listening only on the local interface."
                 log_and_print "This means that you will not be able to access the OpenVAS Manager from the"
                 log_and_print "outside using GSD or OpenVAS CLI."
                 log_and_print "$SUGGEST: Ensure that OpenVAS Manager listens on all interfaces unless you want"
                 log_and_print "a local service only."
		 log_and_print "$SUGGEST: Please run: sed -i -e 's/MANAGER_LISTEN=.*/MANAGER_LISTEN=\"--listen=0.0.0.0\"/g' /etc/conf.d/openvasmd && rc-service openvasmd restart"; 
		;;
    "") log_and_print "$ERROR: OpenVAS Manager is NOT running!"
        log_and_print "$FIX: Start OpenVAS Manager (openvasmd)."
        log_and_print "$FIX: Please run : rc-service openvas-manager start"
        OPENVASMD_PORT="-1" ;;
  esac
  case $OPENVASMD_PORT in
    -1) ;;
    9390) log_and_print "$OK: OpenVAS Manager is listening on port 9390, which is the default port." ;;
    *) log_and_print "$WARNING: OpenVAS Manager is listening on port $OPENVASMD_PORT, which is NOT the default port!"
       log_and_print "$SUGGEST: Ensure OpenVAS Manager is listening on port 9390." ;;
  esac

  case "$GSAD_HOST" in
    "0.0.0.0"|"::") log_and_print "$OK: Greenbone Security Assistant is running and listening on all interfaces." ;;
    "127.0.0.1") log_and_print "$WARNING: Greenbone Security Assistant is running and listening only on the local interface."
                 log_and_print "This means that you will not be able to access the Greenbone Security Assistant from the"
                 log_and_print "outside using a web browser."
                 log_and_print "$SUGGEST: Ensure that Greenbone Security Assistant listens on all interfaces."
                 log_and_print "$SUGGEST: Please run: sed -i -e 's/GSAD_LISTEN=.*/GSAD_LISTEN=\"--listen=0.0.0.0\"/g' /etc/conf.d/gsad && rc-service gsad restart";
		;;
    "") log_and_print "$ERROR: Greenbone Security Assistant is NOT running!"
        log_and_print "$FIX: Start Greenbone Security Assistant (gsad)."
	log_and_print "$FIX: Please run : rc-service gsad start"
        GSAD_PORT="-1" ;;
  esac
  case $GSAD_PORT in
    -1) ;;
    80|443|9392) log_and_print "$OK: Greenbone Security Assistant is listening on port $GSAD_PORT, which is the default port." ;;
    *) log_and_print "$WARNING: Greenbone Security Assistant is listening on port $GSAD_PORT, which is NOT the default port!"
       log_and_print "$SUGGEST: Ensure Greenbone Security Assistant is listening on one of the following ports: 80, 443, 9392." ;;
  esac

  if [ $OPENVASMD_PORT -eq "-1" ] || [ $GSAD_PORT -eq "-1" ];  then
    check_failed
  fi
fi

echo "$CHECKING nmap installation ..."

echo "$CHECKING presence of nmap ..." >> $LOG
if $(check_package nmap); then
  VERSION=`nmap --version | awk '/Nmap version/ { print $3 }'`
  log_and_print "$OK: nmap is present in version $VERSION."
else
  log_and_print "$WARNING: No nmap installation found.";
  log_and_print "$SUGGEST: You should install nmap for comprehensive network scanning (see http://nmap.org)"
fi
echo "" >> $LOG

echo "$CHECKING presence of optional tools ..."

echo "$CHECKING presence of pdflatex ..." >> $LOG

if $(check_package texlive); then
  log_and_print "$OK: pdflatex found."
  HAVE_PDFLATEX=1
else
  log_and_print "$WARNING: Could not find pdflatex binary, the PDF report format will not work."
  log_and_print "$SUGGEST: Install pdflatex."
  log_and_print "$SUGGEST: apk add texlive"
  HAVE_PDFLATEX=0
fi
echo "" >> $LOG

if [ $HAVE_PDFLATEX -eq "1" ]; then
  echo "$CHECKING presence of LaTeX packages required for PDF report generation ..." >> $LOG
  PDFTMPDIR=`mktemp -d -t openvas-check-setup-tmp.XXXXXXXXXX`
  TEXFILE="$PDFTMPDIR/test.tex"
  cat < $TEXFILE
\documentclass{article}
\pagestyle{empty}

%\usepackage{color}
\usepackage{tabularx}
\usepackage{geometry}
\usepackage{comment}
\usepackage{longtable}
\usepackage{titlesec}
\usepackage{chngpage}
\usepackage{calc}
\usepackage{url}
\usepackage[utf8x]{inputenc}

\DeclareUnicodeCharacter {135}{{\textascii ?}}
\DeclareUnicodeCharacter {129}{{\textascii ?}}
\DeclareUnicodeCharacter {128}{{\textascii ?}}

\usepackage{colortbl}

% must come last
\usepackage{hyperref}
\definecolor{linkblue}{rgb}{0.11,0.56,1}
\definecolor{inactive}{rgb}{0.56,0.56,0.56}
\definecolor{openvas_debug}{rgb}{0.78,0.78,0.78}
\definecolor{openvas_false_positive}{rgb}{0.2275,0.2275,0.2275}
\definecolor{openvas_log}{rgb}{0.2275,0.2275,0.2275}
\definecolor{openvas_hole}{rgb}{0.7960,0.1137,0.0902}
\definecolor{openvas_note}{rgb}{0.3255,0.6157,0.7961}
\definecolor{openvas_report}{rgb}{0.68,0.74,0.88}
\definecolor{openvas_user_note}{rgb}{1.0,1.0,0.5625}
\definecolor{openvas_user_override}{rgb}{1.0,1.0,0.5625}
\definecolor{openvas_warning}{rgb}{0.9764,0.6235,0.1922}
\hypersetup{colorlinks=true,linkcolor=linkblue,urlcolor=blue,bookmarks=true,bookmarksopen=true}
\usepackage[all]{hypcap}

%\geometry{verbose,a4paper,tmargin=24mm,bottom=24mm}
\geometry{verbose,a4paper}
\setlength{\parskip}{\smallskipamount}
\setlength{\parindent}{0pt}

\title{PDF Report Test}
\pagestyle{headings}
\pagenumbering{arabic}
\begin{document}
This is a test of the PDF generation capabilities of your OpenVAS installation. Please ignore.
\end{document}
EOT
  pdflatex -interaction batchmode -output-directory $PDFTMPDIR $TEXFILE > /dev/null 2>&1
  if [ ! -f "$PDFTMPDIR/test.pdf" ]; then
    log_and_print "$WARNING: PDF generation failed, most likely due to missing LaTeX packages. The PDF report format will not work."
    log_and_print "$SUGGEST: Install required LaTeX packages."
    log_and_print "$FIX: please copy/paste the following commands: "
    cat<< EOF
latest_tlmgr=$(curl -s ftp://ftp.tug.org/historic/systems/texlive/$(date +%Y)/ | grep texmf | grep -v sha | awk '{print $9}')
latest_tlmgr_sum=$(curl -s ftp://ftp.tug.org/historic/systems/texlive/$(date +%Y)/ | grep texmf | grep sha512 | head -1 | awk '{print $9}' )
wget ftp://ftp.tug.org/historic/systems/texlive/\$(date +%Y)/\$latest_tlmgr
wget ftp://ftp.tug.org/historic/systems/texlive/\$(date +%Y)/\$latest_tlmgr_sum
sha512sum -c \$latest_tlmgr_sum && tar -C /usr/share --strip-components=1 -xvf \$latest_tlmgr || echo "Package corrupted. Download it again"

apk fix texlive
EOF
    log_and_print "$FIX: Or, if you are lazy, download the following script who does the dirty job for you: "
    log_and_print "$FIX: wget  https://gist.githubusercontent.com/fcolista/f47eaf2856a637ed9cea3bcfc6b003e6/raw/2807307220e61d200ff86d0be32338bd5cd6beb9/fix-texlive.sh && chmod +x fix-texlive.sh && sh fix-texlive.sh"
  else
    log_and_print "$OK: PDF generation successful. The PDF report format is likely to work."
  fi
  if [ -f "$PDFTMPDIR/test.log" ]; then
    cat $PDFTMPDIR/test.log >> $LOG
  fi
  rm -rf $PDFTMPDIR
fi

echo "$CHECKING presence of ssh-keygen ..." >> $LOG
if ! $( check_package openssh-keygen); then
  log_and_print "$WARNING: Could not find ssh-keygen binary, LSC credential generation for GNU/Linux targets will not work."
  log_and_print "$SUGGEST: Install ssh-keygen."
  log_and_print "$SUGGEST: Please run: apk add openssh-keygen"
  HAVE_SSHKEYGEN=0
else
  log_and_print "$OK: ssh-keygen found, LSC credential generation for GNU/Linux targets is likely to work."
  HAVE_SSHKEYGEN=1
fi
echo "" >> $LOG

if [ $HAVE_SSHKEYGEN -eq "1" ]; then
  echo "$CHECKING presence of rpm ..." >> $LOG
  if $(check_package rpm); then
    log_and_print "$OK: rpm found, LSC credential package generation for RPM based targets is likely to work."
    HAVE_RPM=1
  else
    log_and_print "$WARNING: Could not find rpm binary, LSC credential package generation for RPM and DEB based targets will not work."
    log_and_print "$SUGGEST: Install rpm."
    log_and_print "$SUGGEST: Please run: apk add rpm";
    HAVE_RPM=0
  fi
  echo "" >> $LOG

  if [ $HAVE_RPM -eq "1" ]; then
    echo "$CHECKING presence of alien ..." >> $LOG
    if $(check_package alien); then
      log_and_print "$OK: alien found, LSC credential package generation for DEB based targets is likely to work."
      HAVE_ALIEN=1
    else
      log_and_print "$WARNING: Could not find alien binary, LSC credential package generation for DEB based targets will not work."
      log_and_print "$SUGGEST: Install alien."
      log_and_print "$SUGGEST: Please run: apk add alien";
      HAVE_ALIEN=0
    fi
    echo "" >> $LOG
  fi
fi

echo ""
echo "It seems like your OpenVAS-$VER installation is $OK."
echo ""
	

#!/bin/sh
#
# (c) 2016  Francesco Colista
# Email: francesco [at] bsod.eu
#
# Script used to build TBS modules from upstream


echo 
echo "**** Check first if linux-headers are installed ****"
echo 

dpkg --list | grep $(uname -r) | grep -q headers

if [ $? = "1" ]; then
        echo "Looks that kernel headers for $(uname -r) are not installed."
	echo "Please install it with the command:"
	echo " - apt-get install linux-headers-$(uname -r)"
	echo "Then, run again $0"
	return 1
fi

echo
echo "Kernel headers are installed. Let's go ahead with compilation"
echo 
cd /root
cd media_build && git pull && cd /root
cd media && git pull && cd /root
cd media_build
make dir DIR=../media
make distclean
make
make install
if [ $? = "0" ]; then
	echo
	echo " ******************************************************************************";
	echo " **** Modules for SAA7160 TBS has been successfully compiled. Please reboot ***";
	echo " ******************************************************************************";
	echo
fi
	

This page is generated with an ash script (busybox) written with vim on Alpine Linux in 
0.017778 seconds