Docker not recognized when authenticated user is not in docker group

Hello,

I believe, I have some kind of misconception about the scanner. In particular the OS and package detection.

When scanning a debian target (authenticated, full and fast) i would expect to find outdated docker installations. Not the docker images obviously.

But I get only results when the used user is in the docker group on the target.

Why doesn’t find openvas the outdated package per dpkg / apt?

Best regard

Tiggez

@Tiggez try scanning with root user?

Eerp

Like I said, when the account is in the docker group it works.

But the root / docker admin access seems unnecessary.

Normal user rights should be enough.

The scanner needs root capabilities like RAW_SOCKET otherwise many VTs will not produce any results.

1 Like

Hi, thank you for the clarification.

But maybe this should be mentioned in:

Best regards
Tiggez