nessus-tool/nessus-tool.patch

Sat, 24 Mar 2012 21:40:49 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Sat, 24 Mar 2012 21:40:49 +0100
changeset 414
fd611cde817f
permissions
-rw-r--r--

Introduce many changes to the buildconf and source code including:
(01) clean up, update, and partially update default config files,
(02) seems that Melware is unable to perform release engineering so
update chan_capi to new daily snapshot to solve echo problems,
(03) correct Asterisk inadequate hard coded gmime version check,
(04) force postgresql pthreads linkage to solve build problem,
(05) remove buggy hard coded LibXML configure definitions,
(06) remove local architecture specification to allow GCC
internal logic to determine proper CPU type instead,
(07) remove vendor sound install target causing uncontrolled
downloads and non RPM managed file installation,
(08) solve long outstanding bug in tcptls causing Asterisk
to ignore any intermediate CA certificate signatures,
(09) back out Digium engineering team's bright idea of replacing the
very portable and pervasive POSIX rand(1) with ast_random(), and
then not even implementing it causing all references to fail in
platforms not providing the very new POSIX.1-2008 mkdtemp(3)
function only distributed by BSD and some Linux,
(10) withdraw advanced linker symbol manipulations from SVR5 builds
until either Binutils supports hybrid versioned and anonymous
linker scripts or GCC stops hard coding versioned linker scripts,
(11) correct missing library linkage, some tailored to a specific OS,
(12) remove outdated logic for the no longer distributed gmime-config(1),
(13) remove local gmime buildconf hacks now that Asterisk has corrected
their own build configuration to almost portably support gmime,
(14) solve build problems relating to undetected LibXML paths,
(15) correct erroneous out of tree include definitions,
(16) improve some variable and comment naming,
(17) simplify sound language path hierarchy creation,
and correct australian english installation logic.

     1 Index: nessus-core/doc/nessusd.8.in
     2 --- nessus-core/doc/nessusd.8.in.orig	2004-10-19 17:21:05 +0200
     3 +++ nessus-core/doc/nessusd.8.in	2005-03-23 11:59:54 +0100
     4 @@ -183,7 +183,7 @@
     5  .SH USERS MANAGEMENT
     7  The utility nessus-adduser(8) creates new nessusd users. Each nessusd user
     8 -is attributed a "home", in @NESSUS_STATEDIR@/users/<username>. This home contains the following directories :
     9 +is attributed a "home", in @NESSUSD_STATEDIR@/users/<username>. This home contains the following directories :
    10  .IP auth/
    11  This directory contains the authentification information for this user. It might contain the file 'dname' if the user is authenticating using a certificate, or 'hash' (or 'passwd') if the user is authenticating using a password. The file 'hash' contains a MD5 hash of the user password, as well as a random seed. The file 'password' should contain the password in clear text.
    13 @@ -206,7 +206,7 @@
    16  When a user attempts to log in, nessusd first checks that the directory
    17 -@NESSUS_STATEDIR@/users/<username> exists, then hashes the password sent by the user with the random salt found in <username>/auth/hash, and compares it with the password hash stored in the same file. If the users authenticates using a certificate, then nessusd checks that the certificate has been signed by a recognized authority, and makes sure that the dname of the certificate shown by the user is the same as the one in <username>/dname.
    18 +@NESSUSD_STATEDIR@/users/<username> exists, then hashes the password sent by the user with the random salt found in <username>/auth/hash, and compares it with the password hash stored in the same file. If the users authenticates using a certificate, then nessusd checks that the certificate has been signed by a recognized authority, and makes sure that the dname of the certificate shown by the user is the same as the one in <username>/dname.
    21  To remove a given user, use the command nessus-rmuser(8).
    22 Index: nessus-core/nessus-mkcert.in
    23 --- nessus-core/nessus-mkcert.in.orig	2004-12-10 20:40:22 +0100
    24 +++ nessus-core/nessus-mkcert.in	2005-03-23 12:00:24 +0100
    25 @@ -407,31 +407,12 @@
    27  chmod a+r $CACERT $SRVCERT #cln $CLNCERT
    29 -
    30 -CF=@sysconfdir@/nessus/nessusd.conf
    31 -egrep -v '^ *(pem_password|cert_file|key_file|ca_file|force_pubkey_auth) *=' "$CF" > "$CF.tmp"
    32 -echo "#
    33 -# Added by nessus-mkcert
    34 -#
    35 -cert_file=$SRVCERT
    36 -key_file=$SRVKEY
    37 -ca_file=$CACERT
    38 -# If you decide to protect your private key with a password, 
    39 -# uncomment and change next line
    40 -# pem_password=password
    41 -# If you want to force the use of a client certificate, uncomment next line
    42 -# force_pubkey_auth = yes" >> "$CF.tmp"
    43 -
    44 -
    45 -
    46 -
    47  test -z "$QUIET" && header
    49  if [ -s "$CACERT" -a -s "$CAKEY" -a -s "$SRVCERT" -a -s "$SRVKEY" ];
    50   then
    51   test -z "$QUIET" && echo "Congratulations. Your server certificate was properly created."
    53 - mv -f "$CF.tmp" "$CF"
    54   test -z "$QUIET" && { 
    55   echo
    56   echo "$CF updated

mercurial