Contribute to SRTool - Revision history

David Reyna at 05:59, 30 November 2023

2023-11-30T05:59:27Z

← Older revision		Revision as of 05:59, 30 November 2023
Line 311:		Line 311:
	\|Improved CPE/package mapping hueristics, advanced reports		\|Improved CPE/package mapping hueristics, advanced reports
	\|Under development (March+ 2019)		\|Under development (March+ 2019)
			\|-
			\|2.00
			\|Add support for importing CVE Checker result
			\|Under development (November+ 2023)
	\|-		\|-
	\|}		\|}

2023-10-18T10:21:09Z

← Older revision		Revision as of 10:21, 18 October 2023
Line 97:		Line 97:

	<code>		<code>
	$ git ~~pull~~		$ # Clone the SRTool
	$ # ~~Copy~~ the ~~dev~~ tools ~~to the base directory~~		$ git clone git://git.yoctoproject.org/srtool && cd srtool
			$ # Bring down the development assistance tools
	$ cp bin/dev_tools/* .		$ cp bin/dev_tools/* .
	$ # ~~Source~~ the ~~debug~~ environment		$ # Prepare the venv and SRTool environment variables
	$ . ~~./srt_env~~.sh ~~debug~~		$ . prepare_environment.sh
	$ # Start the ~~system from scratch~~		$ # Start the SRTool, trigger the CVE downloads
	$ ./~~recreate~~.sh		$ ./restart.sh
	$ # ~~Run~~ the ~~sanity test~~		...
	$ ./~~bin/common/srtool_sanity_test~~.~~py -i~~		SRTool webserver started at http://0.0.0.0:9000
	$		$ # Create the initial superuser account, who can then create all other accounts
			$ ./super.sh
			SRT_MAIN_APP=yp
			The system will manage.
			Username: srtool
			Email address:
			Password:
			Password (again):
			Superuser created successfully.
			$
	</code>		</code>

	~~Sample output~~:		Sanity command test:

	<code>		<code>
Line 125:		Line 135:
	Users = 6		Users = 6
	Data sources= 51		Data sources= 51
	$
	~~</code>~~

	~~To re-start as the full instance, do this:~~

	~~<code>~~
	~~$ # Source the standard environment~~
	~~$ . ./srt_env.sh~~
	~~$ # Start the system from scratch~~
	~~$ ./recreate.sh~~
	$		$
	</code>		</code>

2023-10-18T10:16:49Z

← Older revision		Revision as of 10:16, 18 October 2023
Line 113:		Line 113:
	<code>		<code>
	$ ./bin/common/srtool_sanity_test.py -i		$ ./bin/common/srtool_sanity_test.py -i
	...		* Host statistics ...
			Uname = #44~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Mon May 22 13:39:36 UTC 2 x86_64
			Django = (4, 0, 0, 'final', 0)
			Python3 = Python 3.10.12
			Sqlite3 = 3.37.2 2022-01-06
			Server PID = 95890
			* Database statistics ... (use '-v' for details)
			* Table checks ...
			* Summary ...
			CVEs = 219524
			Users = 6
			Data sources= 51
	$		$
	</code>		</code>

2023-10-15T22:10:25Z

← Older revision		Revision as of 22:10, 15 October 2023
Line 113:		Line 113:
	<code>		<code>
	$ ./bin/common/srtool_sanity_test.py -i		$ ./bin/common/srtool_sanity_test.py -i
	...		...
	$		$
	</code>		</code>

2023-10-15T22:09:43Z

← Older revision		Revision as of 22:09, 15 October 2023
Line 113:		Line 113:
	<code>		<code>
	$ ./bin/common/srtool_sanity_test.py -i		$ ./bin/common/srtool_sanity_test.py -i
	~~Uname = #35~16~~.04.~~1-Ubuntu SMP Thu Jan 25 10:13:43 UTC 2018 x86_64~~		...
	~~Django = (1, 11, 8, 'final', 0)~~
	~~Python3 = Python 3~~.~~5.2~~
	~~Sqlite3 = 3.11.0 2016-02-15~~
	~~Server PID = 10234~~
	~~Server Port = [10234](/opt/srtool/lib/manage.py runserver --noreload 0.0.0.0:9123)~~
	~~CVEs = 64~~
	~~Users = 5~~
	~~Data source = 22~~
	$		$
	</code>		</code>

2023-10-15T21:58:53Z

← Older revision		Revision as of 21:58, 15 October 2023
Line 138:		Line 138:
	== First Time Bring-up ==		== First Time Bring-up ==

	* When you first start, you will have the CVEs from 2015 to ~~2018~~		* When you first start, you will have the CVEs from 2015 to 2023
	* You will not have any Vulnerabilities, Investigations, or Defects until you (a) create them, and/or (b) integrate your defect system or other sustaining data.		* You will not have any Vulnerabilities, Investigations, or Defects until you (a) create them, and/or (b) integrate your defect system or other sustaining data.
	* All CVEs will by default get the status "Historical".		* All CVEs will by default get the status "Historical".

2023-10-15T21:57:47Z

2020-11-24T05:50:45Z

Set up the local repository and SRTool instance

← Older revision		Revision as of 05:50, 24 November 2020
Line 59:		Line 59:

	Option #1: Restrict to the local browser:		Option #1: Restrict to the local browser:
	<code> $ ./bin/~~srtool~~ start webport=localhost:9000 </code>		<code> $ ./bin/srt start webport=localhost:9000 </code>

	Option #2: Enable remote browsers:		Option #2: Enable remote browsers:
	<code> $ ./bin/~~srtool~~ start webport=0.0.0.0:9000 </code>		<code> $ ./bin/srt start webport=0.0.0.0:9000 </code>

	<strong>NOTE</strong>: The first time you run the SRTool, there will be a delay (30 to 60 minutes) as the default CVE repositories (NIST, Mitre, ...) are scanned, scored, and loaded into the database. After that, the updates will be incremental.		<strong>NOTE</strong>: The first time you run the SRTool, there will be a delay (30 to 60 minutes) as the default CVE repositories (NIST, Mitre, ...) are scanned, scored, and loaded into the database. After that, the updates will be incremental.

2019-04-30T22:00:44Z

Set up the local repository and SRTool instance

← Older revision		Revision as of 22:00, 30 April 2019
Line 49:		Line 49:

	<strong>2) Cloning the SRTool</strong>		<strong>2) Cloning the SRTool</strong>

			<code> $ git clone git://git.yoctoproject.org/srtool && cd srtool </code>

			Here is the command if your SSH key is registered:

	<code> $ git clone ssh://git@push.yoctoproject.org/srtool && cd srtool </code>		<code> $ git clone ssh://git@push.yoctoproject.org/srtool && cd srtool </code>

2019-02-07T05:21:53Z

Testing the Alternate Sample Organization 'ACME'

← Older revision		Revision as of 05:21, 7 February 2019
Line 193:		Line 193:
	== Testing the Alternate Sample Organization 'ACME' ==		== Testing the Alternate Sample Organization 'ACME' ==

	* An example alternate organization (master application) called "acme" is included. To enable it do:		* An example alternate organization (master application) called "acme" is included.
			* This code shows all the ways the SRTool can be easily customized to the needs of your organization
			* To enable it and try it out, do the following:

	<code>		<code>