The SCAP database is required ( 2024 )

Linux Distribution and External Repo Discussion
1

Hello guys, I have installed gvm on my ubuntu machine by following the official tutorial.
But I get this errors:

Schermata del 2024-04-21 15-48-19
Schermata del 2024-04-21 15-48-19748Ɨ554 27 KB

root@robot:/home/robot# systemctl status ospd-openvas
ā— ospd-openvas.service - OSPd Wrapper for the OpenVAS Scanner (ospd-openvas)
     Loaded: loaded (/lib/systemd/system/ospd-openvas.service; disabled; vendor preset: enabled)
     Active: active (running) since Sun 2024-04-21 16:05:51 CEST; 28min ago
       Docs: man:ospd-openvas(8)
             man:openvas(8)
    Process: 6599 ExecStart=/usr/bin/ospd-openvas --config /etc/gvm/ospd-openvas.conf --log-config /etc/gvm/ospd-logging.conf (code=exited, status=0/SUCCESS)
   Main PID: 6622 (ospd-openvas)
      Tasks: 6 (limit: 9341)
     Memory: 180.5M
        CPU: 59.403s
     CGroup: /system.slice/ospd-openvas.service
             ā”œā”€6622 /usr/bin/python3 /usr/bin/ospd-openvas --config /etc/gvm/ospd-openvas.conf --log-config /etc/gvm/ospd-logging.conf
             ā”œā”€6626 /usr/bin/python3 /usr/bin/ospd-openvas --config /etc/gvm/ospd-openvas.conf --log-config /etc/gvm/ospd-logging.conf
             ā””ā”€6750 "openvas: openvas: Reloaded 45550 of 90191 NVTs (50% / ETA: 26:30)"

apr 21 16:05:48 robot systemd[1]: Starting OSPd Wrapper for the OpenVAS Scanner (ospd-openvas)...
apr 21 16:05:51 robot systemd[1]: Started OSPd Wrapper for the OpenVAS Scanner (ospd-openvas).
root@robot:/home/robot# systemctl status gsad
ā— gsad.service - Greenbone Security Assistant daemon (gsad)
     Loaded: loaded (/lib/systemd/system/gsad.service; disabled; vendor preset: enabled)
     Active: active (running) since Sun 2024-04-21 16:06:01 CEST; 28min ago
       Docs: man:gsad(8)
             https://www.greenbone.net
   Main PID: 6684 (gsad)
      Tasks: 7 (limit: 9341)
     Memory: 9.3M
        CPU: 111ms
     CGroup: /system.slice/gsad.service
             ā””ā”€6684 /usr/sbin/gsad --listen 127.0.0.1 --port 9392 --http-only

apr 21 16:06:01 robot systemd[1]: Starting Greenbone Security Assistant daemon (gsad)...
apr 21 16:06:01 robot systemd[1]: Started Greenbone Security Assistant daemon (gsad).
root@robot:/home/robot# systemctl status gvmd
ā— gvmd.service - Greenbone Vulnerability Manager daemon (gvmd)
     Loaded: loaded (/lib/systemd/system/gvmd.service; disabled; vendor preset: enabled)
     Active: active (running) since Sun 2024-04-21 16:05:59 CEST; 28min ago
       Docs: man:gvmd(8)
    Process: 6637 ExecStart=/usr/sbin/gvmd --osp-vt-update=/run/ospd/ospd-openvas.sock --listen-group=gvm $OPTIONS (code=exited, status=0/SUCCESS)
   Main PID: 6638 (gvmd)
      Tasks: 2 (limit: 9341)
     Memory: 1.4G
        CPU: 3min 46.779s
     CGroup: /system.slice/gvmd.service
             ā”œā”€6638 "gvmd: gvmd: Wa" --osp-vt-update=/run/ospd/ospd-openvas.sock --listen-group=gvm
             ā””ā”€6670 "gvmd: gvmd: Sy" --osp-vt-update=/run/ospd/ospd-openvas.sock --listen-group=gvm

apr 21 16:05:53 robot systemd[1]: Starting Greenbone Vulnerability Manager daemon (gvmd)...
apr 21 16:05:54 robot systemd[1]: gvmd.service: Can't open PID file /run/gvm/gvmd.pid (yet?) after start: Operation not permitted
apr 21 16:05:59 robot systemd[1]: Started Greenbone Vulnerability Manager daemon (gvmd).
root@robot:/home/robot# tail /var/log/gvm/gvmd.log 
md   main:MESSAGE:2024-04-21 13h43.25 utc:553872:    Greenbone Vulnerability Manager version 22.4.2 (DB revision 250)
md manage:MESSAGE:2024-04-21 13h43.26 utc:553881: No SCAP database found
libgvm util:MESSAGE:2024-04-21 13h43.34 utc:553881: Setting GnuPG dir to '/var/lib/gvm/gvmd/gnupg'
libgvm util:MESSAGE:2024-04-21 13h43.34 utc:553881: Using OpenPGP engine version '2.2.27'
md   main:WARNING:2024-04-21 13h43.35 utc:553881: The gvmd data feed directory /var/lib/gvm/data-objects/gvmd/22.04 or one of its subdirectories does not exist.
md manage:WARNING:2024-04-21 13h43.35 UTC:553913: update_scap: No SCAP db present, rebuilding SCAP db from scratch
md manage:   INFO:2024-04-21 13h43.35 UTC:553914: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-04-21 13h43.39 UTC:553913: update_scap: Updating data from feed
md manage:   INFO:2024-04-21 13h43.39 UTC:553913: Updating CPEs
md   main:MESSAGE:2024-04-21 14h05.53 utc:6637:    Greenbone Vulnerability Manager version 22.4.2 (DB revision 250)
md manage:MESSAGE:2024-04-21 14h05.54 utc:6638: No SCAP database found
libgvm util:MESSAGE:2024-04-21 14h05.59 utc:6638: Setting GnuPG dir to '/var/lib/gvm/gvmd/gnupg'
libgvm util:MESSAGE:2024-04-21 14h05.59 utc:6638: Using OpenPGP engine version '2.2.27'
md   main:WARNING:2024-04-21 14h05.59 utc:6638: The gvmd data feed directory /var/lib/gvm/data-objects/gvmd/22.04 or one of its subdirectories does not exist.
md manage:WARNING:2024-04-21 14h06.00 UTC:6670: update_scap: No SCAP db present, rebuilding SCAP db from scratch
md manage:   INFO:2024-04-21 14h06.00 UTC:6671: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-04-21 14h06.01 UTC:6670: update_scap: Updating data from feed
md manage:   INFO:2024-04-21 14h06.01 UTC:6670: Updating CPEs
md manage:   INFO:2024-04-21 14h20.47 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2020.xml
md manage:   INFO:2024-04-21 14h24.01 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2005.xml
md manage:   INFO:2024-04-21 14h25.43 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2010.xml
md manage:   INFO:2024-04-21 14h27.00 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2011.xml
md manage:   INFO:2024-04-21 14h28.20 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2009.xml
md manage:   INFO:2024-04-21 14h30.19 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2006.xml
md manage:   INFO:2024-04-21 14h32.15 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2003.xml
md manage:   INFO:2024-04-21 14h32.35 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2004.xml
md manage:   INFO:2024-04-21 14h33.08 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2024.xml
md manage:   INFO:2024-04-21 14h34.08 UTC:6670: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2016.xml
root@robot:/home/robot# tail /var/log/gvm/openvas.log 
lib  nasl:MESSAGE:2024-04-20 18h09.35 utc:514549: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h09.45 utc:514584: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h09.55 utc:514622: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h10.05 utc:514643: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h10.15 utc:514658: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h10.25 utc:514674: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h10.35 utc:514690: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h10.45 utc:514706: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h10.55 utc:514730: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
lib  nasl:MESSAGE:2024-04-20 18h11.06 utc:514750: /var/lib/openvas/plugins/plugin_feed_info.inc: Not able to open nor to locate it in include paths
root@robot:/home/robot# tail /var/log/gvm/notus-scanner.log 
2024-04-20 21:37:40,639 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:40:11,501 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:41:12,198 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:42:12,666 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:44:43,189 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:47:13,647 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:49:45,285 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:50:45,887 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-20 21:53:16,910 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
2024-04-21 15:53:28,127 notus-scanner: INFO: (notus.scanner.daemon) Starting notus-scanner version 22.4.5.
root@robot:/home/robot# tail /var/log/gvm/ospd-openvas.log 
OSPD[6599] 2024-04-21 14:06:20,306: WARNING: (gnupg) potential problem: ERROR: keydb_search 33554445
OSPD[6599] 2024-04-21 14:06:20,306: WARNING: (gnupg) gpg returned a non-zero error code: 2
OSPD[6599] 2024-04-21 14:06:20,306: WARNING: (ospd_openvas.notus) GPG verification of notus sha256sums failed. Notus advisories are not loaded.
OSPD[6599] 2024-04-21 14:06:20,306: WARNING: (ospd_openvas.notus) ignoring /var/lib/notus/advisories/ubuntu.notus due to invalid signature
OSPD[6599] 2024-04-21 14:06:25,350: WARNING: (gnupg) potential problem: ERROR: add_keyblock_resource 33587201
OSPD[6599] 2024-04-21 14:06:25,351: WARNING: (gnupg) potential problem: ERROR: keydb_search 33554445
OSPD[6599] 2024-04-21 14:06:25,351: WARNING: (gnupg) potential problem: ERROR: keydb_search 33554445
OSPD[6599] 2024-04-21 14:06:25,352: WARNING: (gnupg) gpg returned a non-zero error code: 2
OSPD[6599] 2024-04-21 14:06:25,352: WARNING: (ospd_openvas.notus) GPG verification of notus sha256sums failed. Notus advisories are not loaded.
OSPD[6599] 2024-04-21 14:06:25,352: WARNING: (ospd_openvas.notus) ignoring /var/lib/notus/advisories/euleros.notus due to invalid signature
root@robot:/home/robot# tail /var/log/gvm/gsad.log 
gsad  gmp:WARNING:2024-04-20 18h05.43 UTC:512221: Failed to connect to server at /run/gvm/gvmd.sock: No such file or directory
gsad  gmp:WARNING:2024-04-20 18h06.44 UTC:512221: Failed to connect to server at /run/gvm/gvmd.sock: No such file or directory
gsad main:MESSAGE:2024-04-20 20h12.21 utc:526691: Starting GSAD version 22.04.1
gsad  gmp:MESSAGE:2024-04-20 20h12.58 utc:526694: Authentication success for 'admin' from 127.0.0.1
gsad  gmp:MESSAGE:2024-04-20 20h29.49 GMT:526694: Authentication success for 'admin' from 127.0.0.1
gsad main:MESSAGE:2024-04-21 13h43.50 utc:553979: Starting GSAD version 22.04.1
gsad  gmp:MESSAGE:2024-04-21 13h44.13 utc:553980: Authentication success for 'admin' from 127.0.0.1
gsad main:MESSAGE:2024-04-21 14h06.02 utc:6683: Starting GSAD version 22.04.1
gsad  gmp:MESSAGE:2024-04-21 14h06.38 utc:6684: Authentication success for 'admin' from 127.0.0.1
gsad  gmp:MESSAGE:2024-04-21 14h30.45 GMT:6684: Authentication success for 'admin' from 127.0.0.1

Any solution?

2

This looks like quite outdated versions you have installed here, for example version 22.4.2 of gvmd has been released on 2023-01-13.

Try to install more recent available versions by following the official instructions here (the current installation probably would need to be wiped / removed first):

1 Like