questions regarding new plug-in policy

Renaud Deraison deraison at nessus.org
Mon Dec 13 14:04:57 EST 2004


On Mon, Dec 13, 2004 at 01:51:08PM -0500, Keyur Lavingia wrote:
> Can you instead have two seperate plugin feeds where anything submitted
> in GPL goes into the GPL feed without any review from Renaud/Tenable.

To be frank, you do not want that. 

Many plugins I receive require minor modifications to prevent them 
from causing false positives / false negatives (and sometime from 
crashing the tested service). Although these modifications are minor,
they make the difference between a plugin which produces a useful output
and a plugin which produces noise randomly.

I suggest you to subscribe to plugins-writers at list.nessus.org and I
suggest to plugins writers to send their plugins over there (and Cc: me
when doing a contribution). That way, you can manually pick the plugins
you want to include in your scan. 

plugins-writers is also archived on http://list.nessus.org/

Blindly accepting anything that comes in on my side would simply be 
irresponsible.


				-- Renaud



More information about the Nessus mailing list