Re: [Openvas-distro-deb] Nessus to be removed from Debian, please switch to OpenVAS
2009/8/3 Stephen Frost <sfrost@snowman.net>:
> * Tim Brown (timb@nth-dimension.org.uk) wrote:
>> I don't see what there is to gain by asking Javier to split his efforts in
>> continuing to maintain Nessus when he has expressed a preference to allow
>> OpenVAS to take its place and has made significant contributions to make that
>> possible.
>
> While I appreciate Tim's comparison, I think the primary point here is
> this- If someone else wants to maintain Nessus 2 in Debian, I don't
> think anyone would object to spending that effort. Javier's free to
> work on what he wants to.
Of course, if someone would like to keep working on Nessus in Debian
he can pick up the currnet packages (I just uploaded 2.2.11 and did
some minor bug fixes BTW). I just wouldn't recommend it.
Actually, I rather not have Nessus shipped with any other Debian
stable release as it is in the best interest of Debian and its users
to only provide software that is actively being maintained upstream.
Note, also, that from Tenable's point of view Debian's Nessus packages
are in that same "grey area" as OpenVAS is in where using them with
the non-free feeds could be against their license. Also, they made
sure that people would not be able to download new GPL plugins with
2.2.x (only registered plugins work) [1]. On these licensing issues,
please read the README.Dean files provided in the packages.
Regards
Javier
[1] For some more information see #443231: nessus-plugins: neither
nessus-update-plugins nor nessus-update-plugins-gpl work
Reply to: