Red Hat NETWORK BASIC - USER REFERENCE GUIDE 4.0 Guida Utente Scaricare il pdf (Pagina 47)

Command Line Operation

The PVS engine provides many options to update and configure PVS from the command line in both Windows and Linux

versions. The HTML5 interface is considered the primary method to make changes. When using the command line interface

in Linux, it is assumed the commands are being performed by a root user or equivalent. When the command line is used in

Microsoft Windows, it is assumed that the shell has been launched using the “Run as Administrator” or an equivalent option.

This section is separated into three sections: a section each for Windows, Linux, and Mac OS X specific command line

options and a section for common options.

Command Line Operations for Linux

Starting the Passive Vulnerability Scanner for Linux

The service command is the preferred method to launch the pvs and pvs-proxy binaries as follows:

# service pvs start

Starting PVS [ OK ]

Starting PVS Proxy [ OK ]

# ps aux|grep pvs

root 18626 9.5 70.5 1492840 1357176 pts/3 Sl 15:38 0:03 /opt/pvs//bin/pvs

root 18629 0.2 0.2 21160 4892 pts/3 S 15:38 0:00 /opt/pvs//bin/pvs-

proxy

Once running, the pvs binary will be monitored by the pvs-proxy daemon utilizing its watchdog options.

In this mode, the PVS will store its vulnerability reports in a directory monitored by the PVS Proxy. When the

SecurityCenter connects to the PVS Proxy, it will copy the appropriate report found in this directory to the SecurityCenter

and import it into the relevant databases.

Once a day, as scheduled, if the SecurityCenter has received new passive vulnerability plugins from Tenable, it will install

them in the PVS plugin directory. PVS will detect the change and automatically reload and begin using the new plugins.

Real-time PVS data will be communicated to the configured Log Correlation Engine server or syslog server(s) in real-time.

Stopping the Passive Vulnerability Scanner for Linux

If you need to stop the PVS service for any reason, use the following command for PVS for Red Hat and CentOS:

# service pvs stop

Stopping PVS Proxy [ OK ]

Stopping PVS [ OK ]

Or to restart the service, use the command:

# service pvs restart

Stopping PVS Proxy [ OK ]

Stopping PVS [ OK ]

Starting PVS [ OK ]

Starting PVS Proxy [ OK ]

File Locations

PVS installs its files into the following locations:

Path

Purpose

/opt/pvs

Base directory

1 2 ... 42 43 44 45 46 47 48 49 50 51 52 ... 78 79

Nessun commento

Red Hat NETWORK BASIC - USER REFERENCE GUIDE 4.0 Guida Utente Pagina 47