strange nessus installation behavior

Message

mikegpitt · Post by **mikegpitt** » Thu Jan 25, 2018 2:04 am

This is just a heads up for anyone trying to use Nessus. I did my own version bump to 7.0.1 so I could install the latest version. When I brought up Nessus on https://localhost:8834 I wasn't prompted to create a user or register. I checked the cli tool to see what was up:

Code: Select all

 # /opt/nessus/sbin/nessuscli lsuser 
.keep_net-analyzer_nessus-bin-0

# /opt/nessus/sbin/nessuscli rmuser
Login to remove: .keep_net-analyzer_nessus-bin-0
User removed

# /opt/nessus/sbin/nessuscli adduser mikeg
Login password:

Strange for sure...

EDIT: Appears to be related to this line in the ebuild

Code: Select all

keepdir /opt/nessus/var/nessus/users

Post by Hu » Thu Jan 25, 2018 4:48 am

Historically, packages could not install empty directories, so keepdir touches a useless file in the directory to make it non-empty. It appears Nessus treats any file present in that directory as a user, regardless of name or content.

mikegpitt · Post by **mikegpitt** » Thu Jan 25, 2018 4:34 pm

Didn't realize that the .keep files weren't required anymore. Going to file a quick bug to have that line removed. Thanks!

Post by Hu » Fri Jan 26, 2018 2:56 am

I do not know if they are still required. I know they were required in the past. They might still be needed.