Description

Install and configure OpenVAS ( Open Vulenability Assessment System ); a fork of the Nessus project.

Project homepage can be found here

Requirements

It's recommended to create a role and apply it to your node definition.

Here's an example role to install an OpenVAS server.
<pre><code>
name "openvas_scanner"
description "Install/Configure an OpenVAS Server"
run_list "recipe[openvas::server]"
override_attributes "openvas_scanner" => { }
</pre></code>

Now upload your role like so:
<pre><code>
knife role from file roles/openvas_scanner.json
</pre></code>

Here's an example role to install an OpenVAS Scanner and automatically enable NVT updates.
<pre><code>
name "openvas_scanner"
description "Install/Configure an OpenVAS Server"
run_list "recipe[openvas::server]"
override_attributes "openvas" => { "enable_nvt_updates_from_cron" => "yes" }
</pre></code>

Don't forget to apply your role to your node's definition
<pre><code>
{
"normal": {
},
"name": "ovasscanner",
"override": {
},
"prod_web": {
},
"json_class": "Chef::Node",
"automatic": {
},
"run_list": [
"role[openvas_scanner]"
],
"chef_type": "node"
}
</pre></code>

Here's an example role to install only an OpenVAS client.
<pre><code>
name "openvas_client"
description "Install/Configure an OpenVAS client"
run_list "recipe[openvas::client]"
override_attributes "openvas_scanner" => { }
</pre></code>

Now upload your role like so:
<pre><code>
knife role from file roles/openvas_client.json
</pre></code>

NOTE ABOUT ADMIN/PASSWORD

The default admin user name and password is written
to /etc/openvas/openvas_admin_pass.txt.

Attributes

Set to "yes" to add entry to /etc/crontab
<pre><code>
default['openvas']['enable_nvt_updates_from_cron'] = "yes"
</pre></code>