diff options
| -rw-r--r-- | .SRCINFO | 8 | ||||
| -rw-r--r-- | LICENSE | 93 | ||||
| -rw-r--r-- | LICENSE.NESSUS | 1040 | ||||
| -rw-r--r-- | PKGBUILD | 42 | ||||
| -rw-r--r-- | nessus.install | 70 |
5 files changed, 188 insertions, 1065 deletions
@@ -1,5 +1,5 @@ # Generated by mksrcinfo v8 -# Tue Jul 19 17:57:44 UTC 2016 +# Fri Jul 22 18:45:54 UTC 2016 pkgbase = nessus pkgdesc = Vulnerability scanner pkgver = 6.8.0 @@ -11,12 +11,10 @@ pkgbase = nessus depends = openssl depends = gnupg source = nessus.sh - source = LICENSE.NESSUS - source = nessus.install + source = LICENSE md5sums = 4106308f11c6b56f05932ee7bf9e71e1 md5sums = 8c5772ac63f97d94475fe03e80d6ba5c - md5sums = 8ff98bc9488304fcb66753d3cfb5f30e - md5sums = d9d25d4075acc50c0050c7a4f244c7cb + md5sums = 1db6df5a39009ace46c7ee40141ece1b pkgname = nessus diff --git a/LICENSE b/LICENSE new file mode 100644 index 000000000000..24b417b2cedf --- /dev/null +++ b/LICENSE @@ -0,0 +1,93 @@ +TENABLE NETWORK SECURITY, INC. +NESSUS® +SOFTWARE LICENSE AND SUBSCRIPTION AGREEMENT + +This is a legal agreement (“Agreement”) between Tenable Network Security, Inc., a Delaware corporation having offices at 7021 Columbia Gateway Drive, Suite 500, Columbia, MD 21046 (“Tenable”), and you (“You”), the party licensing Software and/or downloading the Plugins through Tenable’s subscription service (as each capitalized term is defined below). This Agreement covers Your permitted use of the Software and/or the Plugins, as applicable (collectively, the “Licensed Materials”). BY CLICKING BELOW YOU INDICATE YOUR ACCEPTANCE OF THIS AGREEMENT AND YOU ACKNOWLEDGE THAT YOU HAVE READ ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT, UNDERSTAND THEM, AND AGREE TO BE LEGALLY BOUND BY THEM. IN ADDITION, IF YOU HAVE PREVIOUSLY LICENSED THE SOFTWARE AND/OR THE PLUGINS, BY CLICKING BELOW YOU INDICATE YOUR ACCEPTANCE THAT THESE TERMS AND CONDITIONS SUPERSEDE ANY EARLIER AGREEMENTS AND THAT ALL COPIES OF THE LICENSED MATERIALS IN YOUR POSSESSION WILL BE DEEMED TO BE LICENSED UNDER AND SUBJECT TO THE TERMS AND CONDITIONS OF THIS AGREEMENT. If You do not agree with the terms of this Agreement, You may not use the Licensed Materials. The Licensed Materials can only be provided to You by Tenable. The term “Agreement” includes any exhibits to the document. + +1. Grant of Licenses. +(a) Software License Grant. “Software” means (i) Nessus 5.x or higher that You download from any authorized Tenable website, including www.nessus.org, or obtain via Tenable authorized CD or any other Tenable authorized method; (ii) the associated user manuals and user documentation, if any, as well as any patches, updates, improvements, additions, enhancements and other modifications or revised versions of Nessus 5.x or higher that may be provided to You by Tenable from time to time that were developed by Tenable; and (iii) any Nessus daemons, command line interfaces, web server, application programming interfaces (“APIs”), and/or any graphical user interfaces You obtain from Tenable that were developed by Tenable. Any software that is not marked as copyrighted by Tenable is not Software as defined under this Agreement and is subject to other license terms as described in the documentation. For the avoidance of doubt, any components or software licensed as part of an open source license, if any, are not considered “Software.” If You have obtained a copy of the Software, subject to the terms and conditions, and Your acceptance, of this Agreement, Tenable grants to You a perpetual, non-exclusive, non-transferable license in object code form only to use the Software (i) solely for Your internal operations and internal security purposes to seek and assess information technology vulnerabilities and misconfigurations for Your own networks or that you are otherwise authorized to scan; and (ii) provided that You have received all required consents, to provide services to third parties to seek and assess information technology vulnerabilities and misconfigurations on the third party’s network. Any rights in the Software not granted in this Agreement are expressly reserved by Tenable. You are entitled to one copy of the Software. If you license additional copies of the Software, they must be paid for separately and will be subject to their own terms and conditions. +(b) Plugins License Grant. “Plugins” means any plugins (and related updates) that are marked as copyrighted by Tenable. Any plugins or components that are not marked as copyrighted by Tenable are not Plugins as defined under this Agreement and are subject to other license terms. Subject to the terms and conditions of this Agreement, Tenable grants to You for the Term (as defined below) a non-exclusive, non-transferable license in object code form only to use the Plugins as permitted in conjunction with the Software licensed in Section 1(c). The Plugins include vulnerability detection programs not developed by Tenable or its licensors and which are licensed to You under separate agreements. The terms and conditions of this Agreement do not apply to such vulnerability detection programs. +(c) Products. Tenable licenses several variations of the Software, described in more detail below. Tenable reserves the right to withdraw features from the Software or move features between variations of the Software provided that either: (1) the core functionality of the Software remains the same; or (2) You are offered a license to the product to which the functionality was moved. +(i) Nessus Home. Nessus Home is non-commercial Software that permits You to use the Plugins in conjunction with the Software for Your personal use solely to detect vulnerabilities only on Your own personal system (or for Your own personal network) that You use for non-commercial purposes or on the personal system (or for the personal network) of another natural person in a non-commercial arrangement. You are not eligible to use Nessus Home if You are a corporation, a governmental entity or any other form of organization. You may not use Nessus Home to use the Plugins on a computer owned by Your employer or otherwise use the Plugins for the benefit of or to perform any services for any corporation, governmental entity or any other form of organization. When using Nessus Home, Tenable may collect scan data from You (including results, configuration, and gathered artifacts) in order to provide feedback to Tenable and improve the Software. You may not use Nessus Home with Nessus Manager or with any Software that is managed by a Nessus Manager installation. Tenable does not provide any support services in connection with Nessus Home. +(ii) Nessus Professional. Nessus Professional is commercial Software that permits You to use the Plugins in conjunction with the Software to detect vulnerabilities only on Your system or network, a system or network that you are otherwise authorized to scan, or on the system or network of a third party for which You perform scanning services, auditing services, incident response services, quality assurance and other lab testing, vulnerability assessment services or other security consulting services; provided that You have paid the applicable Fee for each copy of the Software in conjunction with which You will use the Plugins. If You use a supported commercial version of Nessus Professional, Tenable will supply You during the term with reasonable online and email support 24 hours a day, 7 days a week, for the Software. +(iii) Nessus Manager. Nessus Manager is commercial Software that permits You to use the Plugins in conjunction with the Software to detect vulnerabilities only on Your system or network, a system or network that you are otherwise authorized to scan, or on the system or network of a third party for which You perform scanning services, auditing services, incident response services, quality assurance and other lab testing, vulnerability assessment services or other security consulting services. You may only use Nessus Manager for the number of Hosts for which you have paid all applicable Fees. A “Host” is any scanned device that can have a unique tag pushed to it (via a registry entry, text file, etc.), one that can have a unique identifier (CPU ID, Instance ID, Agent ID, IP Address, MAC Address, NetBIOS Name, etc.) pulled from it, or is addressable via URI or URL (i.e., http://www.tenable.com). Your license to use Nessus Manager also will provide You with access to a limited number (equivalent to the Host count) of Nessus agents that You may install on endpoints. Nessus Manager allows multiple users to access the Software. You agree that You are responsible for the use by any of the users permitted to access the Software. Nessus Manager allows You to manage multiple scanners from one installation, at a rate of one scanner for each 256 Hosts licensed up to 10,240 Hosts, and one scanner for each 512 Hosts after that. You may only manage scanners that You have received all appropriate authorizations to use. If You use a supported commercial version of Nessus Manager, Tenable will supply You during the term with reasonable phone, online and email support 24 hours a day, 7 days a week, for the Software. + +2. Other Use. +(a) Training Organizations. Notwithstanding the prohibition on commercial use in Section 1(c)(i), if You are a training organization authorized by Tenable, You may use the Licensed Materials, and provide access to the Licensed Materials to students, in and for the classroom setting only. Upon completion of the class, the student’s right to use the Licensed Materials is terminated and any students wishing to use the Licensed Materials must register for, and pay any applicable fees associated with, their own subscription. You may not use the Licensed Materials granted to You for training purposes to secure Your or any third party’s networks or in any other way except for classroom training in a non-production environment. Tenable may terminate access to any free Licensed Materials under this Section 2(a) at it sole discretion at any time. +(b) Evaluations. Upon Your request and subsequent approval by Tenable, You may receive access to evaluate the Licensed Materials. Such evaluation may take the form of limited access to Nessus Professional or Nessus Manager. Such evaluation may also take the form of an on-demand evaluation where You may use Nessus Home commercially for a limited period of time as specified by Tenable. Unless otherwise agreed to by Tenable, an evaluation will only be provided once. You must purchase a subscription to the Licensed Materials to continue to use them commercially after the evaluation period ends. You may not use an evaluation subscription in a production capacity, to scan third party networks, or to provide a service to Your customers. +(c) Custom Nessus Plugin Development and Distribution. Tenable allows users to write and develop new Nessus plugins; however, You must have an active Nessus subscription in order to add plugins to Your Nessus scanner. You may use the Tenable ".inc" files provided with the Licensed Materials, as well as the built-in NASL functions to write custom plugins for Your internal use and internal redistribution, provided, however, that they may not be privately or publicly distributed, whether for free or for a fee. Plugin writers should also be aware that many of the APIs available in the NASL language and various ".inc" libraries may be used to write custom plugins, but such plugins may only be distributed within Your organization and may not be distributed publicly, whether for free or for a fee. For example, custom plugins that specifically make use of authenticated logins to remote systems via Secure Shell or Windows Domain, that use the libraries included in the Licensed Materials or that have previously been distributed by Tenable, may not be publicly distributed. To ensure that Your custom plugins do not make use of a library that prohibits public distribution, You should audit them to determine which libraries are being invoked and then read each corresponding license. + +3. Term. +This Agreement commences on the date on which You execute this Agreement or download, install or use the Software (whichever occurs first) (the “Effective Date”) and continues until it is terminated according to the terms of this Agreement (the “Term”). The initial subscription commences on the Effective Date and continues as follows: (i) if You subscribe to Nessus Home, until it is terminated according to the terms of this Agreement; or (ii) if You subscribe to Nessus Professional or Nessus Manager, a period of one (1) year until midnight before the anniversary of the Effective Date, unless terminated earlier according to the terms of this Agreement. If You subscribe to Nessus Professional or Nessus Manager, You may extend the subscription for additional one (1) year periods so long as You continue to pay the applicable Fees in accordance with this Agreement and Tenable is making the Licensed Materials commercially available. + +4. Intellectual Property. +This Agreement does not transfer to You any title to or any ownership right or interest in the Licensed Materials. You acknowledge that Tenable owns and retains all right, title and interest in and to the Licensed Materials. All enhancements, modifications and derivative works that Tenable or any Tenable-authorized third party makes to the Licensed Materials or accompanying documentation, and all intellectual property rights therein, will be the property of Tenable. Your rights with respect to the Licensed Materials are limited to the right to use the Licensed Materials pursuant to the terms and conditions in this Agreement. Any rights in or to the Licensed Materials (including rights of use) not expressly granted in this Agreement are reserved by Tenable. + +5. No Reverse Engineering, Other Restrictions. +You may not directly or indirectly: (i) sell, lease, redistribute or transfer any of the Licensed Materials on a stand-alone basis; (ii) decompile, disassemble, reverse engineer, or otherwise attempt to derive, obtain or modify the source code of the Licensed Materials; (iii) reproduce, modify, translate or create derivative works of all or any part of the Licensed Materials; (iv) rent, lease or loan the Licensed Materials in any form to any third party; (v) remove, alter or obscure any proprietary notice, labels, or marks on the Licensed Materials; or (vi) sell, resell, loan or otherwise provide access to third parties to the APIs, Nessus client interface, or Nessus communication interface shipped by Tenable and provided to You. You may not sublicense any of the rights granted to You in this Agreement. You may not distribute or otherwise provide the Licensed Materials to third parties unless authorized to do so in writing by Tenable. You are responsible for all use of the Licensed Materials and for compliance with this Agreement; any breach by You or any user using the Licensed Materials on Your behalf shall be deemed to have been made by You. You may not copy the documentation as You agree it is provided to You under copyright protection. You may not use the Licensed Materials if You are, or You work for, a competitor of Tenable’s in the network security software industry. For the avoidance of doubt, You may not include or redistribute the Licensed Materials on physical or virtual appliances to perform on-site scans. + +6. Restrictions on Third Party Use and Access. +You may permit a third party (a “Third Party”) to (a) use the Licensed Materials to perform security services for Your business or (b) administer the Licensed Materials, each provided that: (i) any such Third Party use or administration is for Your sole benefit and on Your behalf; (ii) You acknowledge that You shall be legally responsible for the Third Party’s use of the Licensed Materials including any obligations arising from such use and any breach by the Third Party of the terms and conditions of the Agreement, including Section 7 (Confidentiality); (iii) usage by You and the Third Party, when taken together, does not at any time exceed the usage restrictions imposed under this Agreement. Upon sixty (60) days’ notice, Tenable may withdraw its consent to the use of any Third Party in its reasonable discretion. You agree not to deliver or otherwise make available the Licensed Materials, in whole or in part, to any party other than Tenable, except for purposes specifically related to Your use of the Licensed Materials, without Tenable’s prior written consent. You agree to use Your commercially reasonable efforts and to take all reasonable steps to ensure that no unauthorized parties have or use the Licensed Materials and that no unauthorized copy, publication, disclosure or distribution of the Licensed Materials, in whole or in part, in any form is made by You or any third party. You agree to notify Tenable promptly of any unauthorized access to, or use, copying, publication, disclosure or distribution of the Licensed Materials. You acknowledge that the Licensed Materials contain valuable Confidential Information and trade secrets of Tenable or its affiliates and their licensors or suppliers. + +7. Confidentiality. +(a) As used in this Agreement, “Confidential Information” means any and all information and material of a party that: (i) is marked “Confidential,” “Restricted,” or “Confidential Information” or other similar marking; (ii) is known by the party receiving it under this Agreement (the “Receiving Party”) to be confidential or proprietary; or (iii) from all the relevant circumstances, a reasonable person would understand to be confidential or proprietary. Tenable’s Confidential Information includes the Licensed Materials. Confidential Information does not include any information that the Receiving Party can prove: (a) was already known to the Receiving Party without restrictions at the time of its disclosure by the other party (the “Disclosing Party”); (b) after its disclosure by the Disclosing Party, is made known to the Receiving Party without restrictions by a third party having the right to do so; (c) is or becomes publicly known without violation of this Agreement; or (d) is independently developed by the Receiving Party without reference to the Disclosing Party’s Confidential Information. Confidential Information will remain the property of the Disclosing Party, and the Receiving Party will not be deemed by virtue of this Agreement or any access to the Disclosing Party’s Confidential Information to have acquired any right, title or interest in or to the Disclosing Party’s Confidential Information. The Receiving Party may not copy any of the Disclosing Party’s Confidential Information without the Disclosing Party’s prior written permission. The Receiving Party may not remove any copyright, trademark, proprietary rights or other notices included in or affixed to any of the Disclosing Party’s Confidential Information. Other than using the Licensed Materials in accordance with the terms of this Agreement, You may not use Tenable’s Confidential Information for Your or a third party’s benefit, competitive development or any other purpose. The Receiving Party agrees: (I) to hold the Disclosing Party’s Confidential Information in strict confidence; (II) to limit disclosure of the Disclosing Party’s Confidential Information to the Receiving Party’s own employees having a need to know the Confidential Information for the purposes of this Agreement or those of any Third Party, as specified in Section 6; (III) not to disclose the Disclosing Party’s Confidential Information to any third party other than to a Third Party as specified in Section 6; (IV) to use the Confidential Information solely and exclusively in accordance with the terms of this Agreement in order to carry out the Receiving Party’s obligations and exercise the Receiving Party rights under this Agreement; (V) to afford the Disclosing Party’s Confidential Information at least the same level of protection against unauthorized disclosure or use as the Receiving Party normally uses to protect its own information of a similar character, but in no event less than reasonable care; and (VI) to notify the Disclosing Party promptly of any unauthorized use or disclosure of the Disclosing Party’s Confidential Information and to cooperate with and assist the Disclosing Party in every reasonable way to stop or minimize such unauthorized use or disclosure. The Receiving Party agrees that if a court of competent jurisdiction determines that the Receiving Party has breached, or attempted or threatened to breach, the Receiving Party’s confidentiality obligations to the Disclosing Party or its proprietary rights, the Disclosing Party will suffer irreparable harm and that monetary damages will be inadequate to compensate it for such breach. Accordingly, the Disclosing Party, in addition to and not in lieu of any other rights, remedies or damages available to it at law or in equity, shall be entitled to seek appropriate injunctive relief and other measures restraining further attempted or threatened breaches of such obligations without requirement to post any bond. Tenable is not willing to accept any confidential information or any personal information from You under this Agreement unless you are licensing Nessus Professional or Nessus Manager. +(b) You acknowledge that Tenable does not require any personally identifiable information, (beyond name, phone number and email) from You for any reason whatsoever, including without limitation in order for Tenable to provide the Licensed Materials or any associated support. However, If You disclose any information that is “Nonpublic Personal Information”, as defined in Title V of the Gramm-Leach-Bliley Act of 1999, or any successor federal statute, and the rules and regulations thereunder, all as may be amended or supplemented from time to time, or “Protected Health Information (‘PHI’)”, as defined in the Health Insurance Portability and Accountability Act of 1996, or any successor federal statute, and the rules and regulations thereunder, all as may be amended or supplemented from time to time, for which You have separate obligations, You will notify Tenable immediately. Upon such written notification, Tenable will take steps to return or destroy the Nonpublic Personal Information or PHI as quickly as reasonably possible and will protect such information in accordance with Your reasonable instructions prior to returning or destroying it. This should not be read as to alleviate any requirement on You to keep such information confidential and Tenable does not assume any liability with respect to Your disclosure whether willful or accidental. + +8. Warranty and Disclaimer. +(a) Licensed Materials. Tenable warrants that, for a period of thirty (30) days from the Effective Date (the “Warranty Period”), the unmodified Licensed Materials will, under normal use, substantially perform the functions described in their technical documentation. If there is a breach of this warranty, then Tenable’s sole obligation, and Your exclusive remedy, will be for Tenable, at its option, to correct the performance of the Licensed Materials at no charge so that it substantially performs the functions described in its technical documentation or to replace the Licensed Materials. You acknowledge that the remedies described in the preceding sentence are sufficient and cannot fail of their essential purpose. +(b) Disclaimer. EXCEPT AS SPECIFICALLY SET FORTH IN SECTION 8(a), TENABLE DOES NOT MAKE ANY WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY WARRANTIES OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, INTEGRATION, PERFORMANCE AND ACCURACY, AND ANY IMPLIED WARRANTIES ARISING FROM STATUTE, COURSE OF DEALING, COURSE OF PERFORMANCE OR USAGE OF TRADE, OTHER THAN THOSE WARRANTIES WHICH ARE IMPLIED BY AND INCAPABLE OF EXCLUSION, RESTRICTION, OR MODIFICATION UNDER APPLICABLE LAW. TENABLE MAKES NO WARRANTY THAT THE LICENSED MATERIALS WILL OPERATE ERROR-FREE, FREE OF ANY SECURITY DEFECTS OR IN AN UNINTERRUPTED MANNER. + +9. Limitation of Liability. +IF YOU SHOULD BECOME ENTITLED TO CLAIM DAMAGES FROM TENABLE (INCLUDING FOR NEGLIGENCE, STRICT LIABILITY, BREACH OF CONTRACT, MISREPRESENTATION AND OTHER CONTRACT OR TORT CLAIMS) TENABLE WILL BE LIABLE ONLY FOR THE AMOUNT OF YOUR ACTUAL DIRECT DAMAGES, NOT TO EXCEED (IN THE AGGREGATE FOR ALL CLAIMS) THE FEES, IF ANY, YOU PAID TO TENABLE UNDER THIS AGREEMENT WITHIN THE TWELVE MONTH PERIOD IMMEDIATELY PRECEDING THE EARLIEST DATE ON WHICH THE ACT OR OMMISSION GIVING RISE TO YOUR CLAIM OCCURRED OR SHOULD HAVE OCCURRED, AS APPLICABLE. + +10. Exclusion of Damages. +UNDER NO CIRCUMSTANCES WILL TENABLE BE LIABLE TO YOU OR ANY OTHER PERSON OR ENTITY FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY OR PUNITIVE DAMAGES (INCLUDING NEGLIGENCE, STRICT LIABILITY, BREACH OF CONTRACT, MISREPRESENTATION AND OTHER CONTRACT OR TORT CLAIMS; LOST PROFITS; OR ANY DAMAGES RESULTING FROM LOSS OF DATA, SECURITY BREACH, PROPERTY DAMAGE, LOSS OF REVENUE, LOSS OF BUSINESS OR LOST SAVINGS), ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT, THE PERFORMANCE OF THE LICENSED MATERIALS OR OF ANY OTHER OBLIGATIONS RELATING TO THIS AGREEMENT, WHETHER OR NOT TENABLE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOU ARE SOLELY RESPONSIBLE AND LIABLE FOR VERIFYING THE SECURITY, ACCURACY AND ADEQUACY OF ANY OUTPUT FROM THE LICENSED MATERIALS, AND FOR ANY RELIANCE THEREON. + +11. Additional Provisions Regarding Liability. +The limitations of liability set forth in Sections 9 and 10 will survive and apply notwithstanding the failure of any limited or exclusive remedy for breach of warranty set forth in this Agreement. The parties agree that the foregoing limitations will not be read so as to limit any liability to an extent that would not be permitted under applicable law and specifically will not limit any liability for gross negligence, intentional tortious or unlawful conduct or damages for strict liability that may not be limited by law. + +12. Indemnification. +(a) Each of the parties acknowledges and agrees that by entering into and performing its obligations under this Agreement, Tenable will not assume and should not be exposed to the business and operational risks associated with Your business and your use of the Licensed Materials. You acknowledge that Your use of the Licensed Materials is only a portion of Your overall security solution and that Tenable is not responsible for Your overall security solution. The parties acknowledge that the use of the Licensed Materials may affect the operation of Your network during vulnerability scanning. Tenable shall not be liable to You for any impairment of the operation of Your network arising from Your use of the Licensed Materials during such scanning. As between You and Tenable, You are (and Tenable is not) responsible for the success or failure of such security solution. Accordingly, You agree that You will, at Your expense, indemnify, defend and hold Tenable harmless in all claims and actions that seek compensation of any kind for injury or death to persons and/or for damage to property, and that arise out of or relate to Your security solutions or Your use of the Licensed Materials or the solutions You provide to a third party through Your use of the Licensed Materials. You also agree to pay all settlements, costs, damages, legal fees and expenses finally awarded in all such claims and actions. If You are a governmental entity that is prohibited by applicable law from providing this type of indemnification, this Section 12(a) will not apply. +The following provision applies only to Nessus Professional and Nessus Manager subscriptions: +(b) Tenable will, at its sole cost and expense, defend (or at its option, settle) and indemnify You and Your subsidiaries and affiliates, and their officers, directors, employees, representatives and agents, from and against any and all third party claims brought against You based upon a claim that use of the Licensed Materials in accordance with this Agreement infringes such third party’s United States patent, copyright or trademark or misappropriates any trade secret, and will pay all settlements entered into and damages finally awarded (including reasonable attorneys’ fees) to the extent based on such claim or action, provided that You give Tenable (a) prompt notice of such action or claim; (b) the right to control and direct the investigation, defense, and/or settlement of such action or claim; and (c) reasonable cooperation. If Your use of the Licensed Materials is, or in Tenable’s opinion is likely to be, the subject of an infringement claim, or if required by settlement, Tenable may, in its sole discretion and expense, (a) substitute for the Licensed Materials substantially functionally similar non-infringing software; (b) procure for You the right to continue using the Licensed Materials; (c) if the infringing material consists of Plugins, remove the Plugins in question from the subscription and provide You with a pro rata refund based upon the total number of Plugins removed relative to the total number of Plugins; or (d) terminate this Agreement, accept return of the Licensed Materials and refund to You the Fee for the portion of the Term paid for but not yet received. Tenable has no liability with respect to patent, copyright or trademark infringement or trade secret misappropriation arising out of: (i) modifications of the Licensed Materials; (ii) Your use of the Licensed Materials in combination with software (other than the Software) or third party equipment; (iii) Your failure to use any new or corrected versions of the Licensed Materials made available by Tenable; or (iv) Your use of the Licensed Materials in a manner not permitted by this Agreement. This Section 12(b) sets forth Tenable’s sole liability and Your sole and exclusive remedy with respect to any claim of intellectual property infringement by the Licensed Materials. + +13. Verification. +For the term of this Agreement and one (1) year thereafter, You agree that Tenable or its designee shall have the right, at its own expense and under reasonable conditions of time and place, to audit and copy all records of Your use of the Software. Upon Tenable’s written approval, Tenable may instead require You to complete accurately a self-audit questionnaire in a form provided by Tenable. If an audit reveals unlicensed use of the Licensed Materials, a breach of this Agreement or underpayment of any Fees by You or Your employees or agents, You must, in addition to such other rights and remedies as may be available to Tenable as the result of such breach, promptly order and pay for sufficient licenses (at Tenable’s then-current price for such licenses) to permit all usage disclosed and pay the full cost of such audit and copying. Tenable will use information obtained from such audit only to verify and enforce Your compliance with the terms of this Agreement, to comply with any governmental reporting requirements and for such other purposes as required by law. The foregoing audit right will not apply to the extent not allowable under applicable law. + +14. Your Payment Obligations. +You agree to pay any and all amounts due or incurred by You as specified in the invoice for the applicable subscription to the Licensed Materials (the "Fees"). The invoice may be issued by Tenable or one of its authorized distributors, as applicable. Payment is due upon delivery of an invoice unless other terms have been agreed upon by Tenable. You agree to pay directly or reimburse Tenable (or the authorized distributor, as applicable) for any taxes (including, sales or excise taxes, value added taxes, landing fees, import duties and the like), however designated and whether foreign or domestic, arising out of this Agreement, imposed on the Plugins or the use thereof, or Tenable’s performance under this Agreement. You agree to pay invoices under this Agreement without deducting any present or future taxes, withholdings or other charges except those deductions it is legally required to make. If You are legally required to make any deductions, You agree to pay such amounts as are necessary to make the net amounts remaining after such deductions equal to the stated amount due under this Agreement. The payments or reimbursements will be in such amounts as are sufficient to relieve Tenable (or the authorized distributor, as applicable) from owing any further taxes, either directly or on the basis of the payments made under this Agreement. Notwithstanding the foregoing, Tenable will be solely responsible for its income tax obligations and all employer reporting and payment obligations with respect to its personnel. You agree to pay any interest and penalties imposed by any taxing authorities to the extent such interest and penalties are applicable to taxes not paid at Your request or as a result of reliance by Tenable (or the authorized distributor, as applicable) on Your representations. If a certificate of exemption or similar document or proceeding is necessary in order to exempt any transaction from a tax, You will obtain such certificate or document. + +15. Legal Compliance; Restricted Rights. +The Licensed Materials are provided solely for lawful purposes and use. You are solely responsible for, and agree to perform Your obligations in a manner that complies with all applicable national, federal, state and local laws, statutes, ordinances, regulations, codes and other types of government authority (including those governing export control, unfair competition, anti-discrimination, false advertising, privacy and data protection, and publicity and those identifying and requiring permits, licenses, approvals, and other consents) (“Laws”). If a charge is made that You are not complying with any such Laws, You will promptly notify Tenable of such charges in writing. Without limiting the foregoing, You agree to comply with all U.S. export Laws (including the International Traffic in Arms Regulation (“ITAR”), 22 CFR 120-130, and the Export Administration Regulation (“EAR”), 15 CFR Parts 730 et seq.) and applicable export Laws of Your locality (if You are not in the United States), to ensure that no information or technical data provided pursuant to this Agreement is exported or re-exported directly or indirectly in violation of Law or without first obtaining all required authorizations or licenses. No physical or computational access by nationals of any country listed in Country Group E:1 in Supplement No. 1 to part 740 of the EAR is permitted. You will, at Your sole cost and expense, obtain and maintain in effect all permits, licenses, approvals and other consents related to Your obligations under this Agreement. You agree, at Your expense, to comply with all foreign exchange and other Laws applicable to You. The parties further agree to comply with sanctions administered by the Department of Treasury’s Office of Foreign Assets Control (“OFAC”) and shall not engage in prohibited trade to persons or entities on the Specially Designated Nationals (“SDN”) list. Unless You are prohibited by law from doing so, You will defend, indemnify, and hold Tenable harmless from any breach of this Section 15. + +16. Termination. +(a) You may terminate this Agreement at any time by destroying or returning to Tenable the Licensed Materials, together with all copies, modifications and merged portions of the Licensed Materials in any form. +(b) This Agreement and Your license to use the Licensed Materials shall terminate automatically if You fail to comply with any term or condition of this Agreement. +(c) Immediately upon termination of this Agreement, You shall destroy or return to Tenable the Licensed Materials, together with all copies, modifications and merged portions of the Licensed Materials in any form, and shall certify to Tenable in writing that through Your commercially reasonable efforts and to Your knowledge all such materials have been destroyed or returned to Tenable and removed from host computers on which the Licensed Materials resided. However, You may download the then-current version of the Licensed Materials and enter into a new license under the then-current terms. The removal and deletion provisions of this Section do not apply to copies of the Licensed Materials that are made pursuant to Your reasonable back-up and archival policies (under which back-up tapes that will be overwritten in due course may contain copies of the Licensed Materials), provided that (i) such copies are only retained by You in the course of Your back-up procedures, (ii) such copies will be deleted within a reasonable period of time in the normal course of overwriting under the back-up process, and (iii) such copies never be used to exceed the license restrictions under this Agreement. +(d) Any provision of this Agreement that imposes or contemplates continuing obligations on a party, including Sections 4, 5, 6, 7, 9, 10, 11, 13, 16, 17, 22, and 23 will survive the expiration or termination of this Agreement. + +17. Governing Law and Dispute Resolution. +(a) This Agreement shall be governed in all respects by the laws of the State of Maryland, USA, without regard to choice-of-law rules or principles. If You are a governmental entity that cannot legally agree to be governed by the laws of the State of Maryland, this Section 17(a) will be deemed to refer to the laws of the Your state rather than to the State of Maryland. +(b) You and Tenable submit to the exclusive jurisdiction of the courts of Howard County, Maryland and the United States District Court for Maryland, Baltimore Division, for any question or dispute arising out of or relating to this Agreement. Due to the high costs and time involved in commercial litigation before a jury, the parties waive all right to a jury trial with respect to any and all issues in any action or proceeding arising out of or related to this Agreement. If You are a governmental entity that cannot legally submit to the exclusive jurisdiction of the courts of Howard County, Maryland, this Section 17(b) will be deemed to be deleted. +(c) The Licensed Materials are licensed subject to Tenable’s standard commercial agreement (this Agreement); the Licensed Materials are commercial items as defined by the Federal Acquisition Regulation (FAR) System, Title 48 of the Code of Federal Regulations. Tenable licenses the Licensed Materials to You pursuant to the terms of this Agreement and not any clause identified in FAR Part 27, DFARS Part 227, or any other government agency data rights clause, except that, if You are a government entity and the Agreement is subject to FAR 52.227-19 Commercial Computer Software License (Dec 2007), Tenable agrees that that clause supplements the other terms of this Agreement. If you do not agree to the terms of this paragraph, you shall return the Licensed Materials unused for a refund. +(d) You expressly agree with Tenable that this Agreement shall not be governed by the U.N. Convention on Contracts for the International Sale of Goods, the application of which is expressly excluded. No aspect or provision of the Uniform Computer Information Transactions Act, as implemented under Maryland law, shall apply to this Agreement. + +18. Notices. +Any notices or other communication required or permitted to be made or given by either party pursuant to this Agreement will be in writing, in English, and will be deemed to have been duly given when delivered if delivered personally or sent by recognized overnight express courier, to the address specified herein or such other address as a party may specify in writing. Tenable may also provide notices to You via an email address You have provided to Tenable. All notices to Tenable shall be sent to the attention of the Legal Department, at Tenable Network Security, 7021 Columbia Gateway Drive, Suite 500, Columbia, MD 21046. + +19. Transfer and Assignment. +You may not rent, lease, lend, sublicense or otherwise provide the Licensed Materials to any third party, except as expressly provided in this Agreement. You may not assign or otherwise transfer this Agreement without Tenable’s prior written consent. You may use the Licensed Materials to provide services to third parties only as expressly provided in this Agreement. + +20. Language. +The language of this Agreement is English and all invoices and other documents given under this Agreement must be in English to be effective. No translation, if any, of this Agreement or any notice will be of any effect in the interpretation of this Agreement or in determining the intent of the parties. + +21. Third Parties. +This Agreement is not intended nor will it be interpreted to confer any benefit, right or privilege in any person or entity not a party to this Agreement. Any party who is not a party to this Agreement has no right under any Law to enforce any term of this Agreement. + +22. Trademarks. +Nessus, ProfessionalFeed, HomeFeed, Tenable Network Security and Tenable’s “hexagon” logo are registered trademarks of Tenable. Tenable’s other logos, including the “eye” logo, are also trademarks of Tenable. Tenable does not grant to You, either expressly or by implication, any license or permission under this Agreement to use any of the Tenable marks (including trademarks, service marks, trade names, trade dress, symbols, logos, designs, domain names, slogans and other source identifiers). + +23. General. +This Agreement constitutes the entire agreement between the parties, and supersedes all other prior or contemporaneous communications between the parties (whether written or oral) relating to the subject matter of this Agreement, provided, however, that this Agreement will not supersede (and will be subject to) any written agreements signed by both Tenable and You that contain license terms for the Licensed Materials and that specifically provide that such agreements are intended to supersede license agreements that may be included in subsequent orders of the Licensed Materials. Tenable will provide a reasonable replacement for damaged or lost Licensed Materials for You at no charge. No supplement, modification or amendment of this Agreement shall be binding, unless executed in writing by a duly authorized representative of each party to this Agreement. The provisions of this Agreement will be deemed severable, and the unenforceability of any one or more provisions will not affect the enforceability of any other provisions. In addition, if any provision of this Agreement, for any reason, is declared to be unenforceable, the parties will substitute an enforceable provision that, to the maximum extent possible under applicable law, preserves the original intentions and economic positions of the parties. Unless Tenable agrees otherwise, You agree that Tenable may use Your name in a customer list. Neither party shall be liable for any loss or delay (including failure to meet the service level commitment) resulting from any force majeure event, including, but not limited to, acts of God, fire, natural disaster, terrorism, labor stoppage, Internet service provider failures or delays, civil unrest, war or military hostilities, criminal acts of third parties, and any payment date or delivery date shall be extended to the extent of any delay resulting from any force majeure event. No failure or delay by a party in exercising any right, power or remedy will operate as a waiver of that right, power or remedy, and no waiver will be effective unless it is in writing and signed by the waiving party. If a party waives any right, power or remedy, the waiver will not waive any successive or other right, power or remedy the party may have under this Agreement. Any provision of this Agreement that imposes or contemplates continuing obligations on a party will survive the expiration or termination of this Agreement. “Including” and its derivatives (such as “include” and “includes”) mean including without limitation; this term is as defined, whether or not capitalized in this Agreement. + +Subscription Agreement v13 03.03.15 diff --git a/LICENSE.NESSUS b/LICENSE.NESSUS deleted file mode 100644 index 548d9594d931..000000000000 --- a/LICENSE.NESSUS +++ /dev/null @@ -1,1040 +0,0 @@ -TENABLE NETWORK SECURITY, INC. -NESSUS -SOFTWARE LICENSE AGREEMENT - -This is a legal agreement ("Agreement") between -Tenable Network Security, Inc., a Delaware -corporation having offices at 7063 Columbia Gateway -Drive, Suite 100, Columbia, MD 21046 -("Tenable"), and you, the party licensing -Software and obtaining the feed services ("You"). - This Agreement covers your permitted use of the -Software and the Services. BY CLICKING BELOW YOU -INDICATE YOUR ACCEPTANCE OF THIS AGREEMENT AND -YOU ACKNOWLEDGE THAT YOU HAVE READ ALL OF THE -TERMS AND CONDITIONS OF THIS AGREEMENT, -UNDERSTAND THEM, AND AGREE TO BE LEGALLY BOUND BY -THEM. If You do not agree with the terms of this -Agreement, You may not use the Software, as such -term is defined below. The Software can only be -provided to You by Tenable. The term -"Agreement" includes any exhibits to the document. - - -1. Grant of Software License. -(a) Grant. Subject to the terms and conditions, -and your acceptance, of this Agreement, Tenable -grants to You a perpetual, non-exclusive, -non-transferable license (the "License") in -object code form only to use the Software (i) -solely for Your internal operations and internal -security purposes to seek and assess information -technology vulnerabilities events for Your own -networks; and (ii) to provide services to third -parties to seek and assess information technology -vulnerabilities events on the third party's -network. Any rights in the Software not granted -in this Agreement are expressly reserved by -Tenable. -(b) Definition of Software. -(i) The term "Software" means (i) Nessus 3.x that -You download from any Tenable website, including -www.nessus.org, or obtain via CD or any other -method; (ii) the associated user manuals and user -documentation, if any, as well as any patches, -updates, improvements, additions, enhancements -and other modifications or revised versions of -Nessus 3.x that may be provided to You by Tenable -from time to time that were developed by Tenable; -and (iii) any Nessus daemons, command line -interfaces, and/or any graphical user interfaces -You obtain from Tenable that were developed by -Tenable. -(ii) Any Software that is not marked as -copyrighted by Tenable are not Software as -defined under this Agreement and are subject to -other license terms. -(iii) Tenable has the right to, or the right to -license, the Software, including any libraries -licensed under LGPL. Contact Tenable for more -details. -(c) Maintenance and Support. Tenable will not -provide any maintenance or support services as -part of this Agreement unless You obtain a -"Direct Feed Subscription", as such term is -defined in Exhibit A, from Tenable. - -2. Subscriptions. -You may obtain a subscription to receive Plugins -(as such term is defined in Exhibit A) and -updates to the Plugins as further described in -Exhibit A, which is incorporated herein by -reference. - -3. Term. -This Agreement commences on the date on which You -execute this Agreement or download, install or -use the Software (whichever occurs first) (the -"Effective Date") and continues until it is -terminated according to the terms of this -Agreement. - -4. Intellectual Property. -This Agreement does not transfer to You any title -to or any ownership right or interest in the -Software. You acknowledge that Tenable owns and -retains all right, title and interest in and to -the Software. All enhancements, modifications -and derivative works that Tenable makes to the -Software or accompanying documentation, and all -intellectual property rights therein, will be the -property of Tenable. Your rights with respect to -the Software are limited to the right to use the -Software pursuant to the terms and conditions in -this Agreement. - -5. No Reverse Engineering, Other Restrictions. -You may not directly or indirectly: (i) sell, -lease, redistribute or transfer any of the -Software on a stand-alone basis; (ii) decompile, -disassemble, reverse engineer, or otherwise -attempt to derive, obtain or modify the source -code of the Software; (iii) reproduce, modify, -translate or create derivative works of all or -part any of the Software; (iv) rent, lease or -loan the Software in any form to any third party -or otherwise allow a third party to use the -Software; or (v) remove, alter or obscure any -proprietary notice, labels, or marks on the -Software. You may not sublicense any of the -rights granted to You in this Agreement. You may -not distribute or otherwise provide Software to -third parties. You are responsible for all use -of the Software and for compliance with this -Agreement; any breach by You or any user using -the Software on Your behalf shall be deemed to -have been made by You. - -6. Restrictions on Third Party Use and Access. - You agree not to deliver or otherwise -make available the Software, in whole or in part, -to any party other than Tenable, except for -purposes specifically related to Your use of the -Software without Tenable's prior written consent. -You agree to use Your best efforts and to take -all reasonable steps to ensure that no -unauthorized parties have access to the Software -and that no unauthorized copy, publication, -disclosure or distribution of the Software, in -whole or in part, in any form is made by You or -any third party. You agree to notify Tenable of -any unauthorized access to, or use, copying, -publication, disclosure or distribution of, the -Software. You acknowledge that the Software -contains valuable confidential information and -trade secrets of Tenable or its affiliates and -their licensors or suppliers, and that -unauthorized access to, or use, copying, -publication, disclosure or distribution of, the -Software is harmful to Tenable or its affiliates -and their licensors or suppliers. - -7. Confidentiality. -As used in this Agreement, "Confidential -Information" means any and all information and -material that: (i) gives of Tenable some -competitive business advantage or the opportunity -of obtaining such advantage or is otherwise -confidential or a trade secret; (ii) is marked -"Confidential," "Restricted," or "Confidential -Information" or other similar marking; (iii) is -known by You to be confidential or proprietary; -or (iv) from all the relevant circumstances, -should reasonably be assumed by You to be -confidential or proprietary. Confidential -Information includes the Software. Confidential -Information does not include any information that -You can prove: (a) was already known to You -without restrictions at the time of its -disclosure by Tenable; (b) after its disclosure -by Tenable, is made known to You without -restrictions by a third party having the right to -do so; (c) is or becomes publicly known without -violation of this Agreement; or (d) is -independently developed by You without reference -to the Confidential Information. Confidential -Information will remain the property of Tenable, -and You will not be deemed by virtue of this -Agreement or any access to the Confidential -Information to have acquired any right, title or -interest in or to the Confidential Information. -You may not copy any Confidential Information -without Tenable's prior written permission. You -may not remove any copyright, trademark, -proprietary rights or other notices included in -or affixed to any Confidential Information. You -may not use the Confidential Information for Your -or a third party's benefit, competitive -development or any other purpose. You agree: (I) -to hold the Confidential Information in strict -confidence; (II) to limit disclosure of the -Confidential Information to Your own employees -having a need to know the Confidential -Information for the purposes of this Agreement; -(III) not to disclose any Confidential -Information to any third party; (IV) to use the -Confidential Information solely and exclusively -in accordance with the terms of this Agreement in -order to carry out Your obligations and exercise -Your rights under this Agreement; (V) to afford -the Confidential Information at least the same -level of protection against unauthorized -disclosure or use as You normally uses to protect -Your own information of a similar character, but -in no event less than reasonable care; and (VI) -to notify Tenable promptly of any unauthorized -use or disclosure of the Confidential Information -and to cooperate with and assist Tenable in every -reasonable way to stop or minimize such -unauthorized use or disclosure. You agree that -if a court of competent jurisdiction determines -that You have breached, or attempted or -threatened to breach, Your confidentiality -obligations to Tenable or Tenable's proprietary -rights, money damages, Tenable will suffer -irreparable harm and that monetary damages will -be inadequate to compensate Tenable for such -breach. Accordingly, Tenable, in addition to and -not in lieu of any other rights, remedies or -damages available to it at law or in equity, -shall be entitled to seek appropriate injunctive -relief and other measures restraining further -attempted or threatened breaches of such -obligations without requirement to post any bond. - -8. Warranty and Disclaimer. -(a) Software. Tenable warrants that, for a -period of thirty (30) days from the Effective -Date (the "Warranty Period"), the unmodified -Software will, under normal use, substantially -perform the functions described in its technical -documentation. If there has been a breach of -this warranty, then Tenable's sole obligation, -and Your exclusive remedy, will be for Tenable, -at its option, to correct the performance of the -Software at no charge so that it substantially -performs the functions described in its technical -documentation or to replace the Software. You -acknowledge that, because the license for the -Software is at no charge, the remedies described -in the preceding sentence are sufficient and can -not fail of their essential purpose. -(b) Disclaimer. EXCEPT AS SPECIFICALLY SET FORTH -IN SECTION 8(a), TENABLE DOES NOT MAKE ANY -WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, -OR STATUTORY, INCLUDING ANY WARRANTIES OF TITLE, -NON-INFRINGEMENT, MERCHANTABILITY, FITNESS FOR A -PARTICULAR PURPOSE, INTEGRATION, PERFORMANCE AND -ACCURACY, AND ANY IMPLIED WARRANTIES ARISING FROM -STATUTE, COURSE OF DEALING, COURSE OF PERFORMANCE -OR USAGE OF TRADE, OTHER THAN THOSE WARRANTIES -WHICH ARE IMPLIED BY AND INCAPABLE OF EXCLUSION, -RESTRICTION, OR MODIFICATION UNDER APPLICABLE -LAW. TENABLE MAKES NO WARRANTY THAT THE SOFTWARE -WILL OPERATE ERROR-FREE, FREE OF ANY SECURITY -DEFECTS OR IN AN UNINTERRUPTED MANNER. - -9. Exclusion Damages. -UNDER NO CIRCUMSTANCES WILL TENABLE BE LIABLE TO -YOU OR ANY OTHER PERSON OR ENTITY FOR DIRECT -(INCLUDING FOR NEGLIGENCE, STRICT LIABILITY, -BREACH OF CONTRACT, MISREPRESENTATION AND OTHER -CONTRACT OR TORT CLAIMS), INDIRECT, INCIDENTAL, -CONSEQUENTIAL, SPECIAL, EXEMPLARY OR PUNITIVE -DAMAGES (INCLUDING NEGLIGENCE, STRICT LIABILITY, -BREACH OF CONTRACT, MISREPRESENTATION AND OTHER -CONTRACT OR TORT CLAIMS; LOST PROFITS; OR ANY -DAMAGES RESULTING FROM LOSS OF DATA, SECURITY -BREACH, PROPERTY DAMAGE, LOSS OF REVENUE, LOSS OF -BUSINESS OR LOST SAVINGS), ARISING OUT OF OR IN -CONNECTION WITH THIS AGREEMENT, THE PERFORMANCE -OF THE SOFTWARE OR OF ANY OTHER OBLIGATIONS -RELATING TO THIS AGREEMENT, WHETHER OR NOT -TENABLE HAS BEEN ADVISED OF THE POSSIBILITY OF -SUCH DAMAGES. YOU ARE SOLELY RESPONSIBLE AND -LIABLE FOR VERIFYING THE SECURITY, ACCURACY AND -ADEQUACY OF ANY OUTPUT FROM THE SOFTWARE, AND FOR -ANY RELIANCE THEREON. - -10. Additional Provisions Regarding Liability. -The parties agree that the foregoing limitations -will not be read so as to limit any liability to -an extent that would not be permitted under -applicable law and specifically will not limit -any liability for gross negligence, intentional -tortious or unlawful conduct or damages for -strict liability that may not be limited by law. - -11. Indemnification. -Each of the parties acknowledges and agrees that -by entering into and performing its obligations -under this Agreement, Tenable will not assume and -should not be exposed to the business and -operational risks associated with Your business. -You acknowledge that Your use of the Software is -only a portion of Your overall security solution -and that Tenable is not responsible for Your -overall security solution. As between You and -Tenable, You are (and Tenable is not) responsible -for the success or failure of such security -solution. Accordingly, You agree that you will, -at your expense, indemnify, defend and hold -Tenable harmless in all claims and actions that -seek compensation of any kind for injury or death -to persons and/or for damage to property, and -that arise out of or relate to Your security -solutions or Your use of the Software or the -solutions You provide to a third party through -Your use of the Software. You also agree to pay -all settlements, costs, damages, legal fees and -expenses finally awarded in all such claims and -actions. - -12. Legal Compliance; Restricted Rights. -The Software are provided solely for lawful -purposes and use. You are solely responsible -for, and agree to perform your obligations in a -manner that complies with all applicable -national, regional and local laws, statutes, -ordinances, regulations, codes and other types of -government authority (including those governing -export control, unfair competition, -anti-discrimination, false advertising, privacy -and data protection, and publicity and those -identifying and procuring required permits, -licenses, approvals, and other consents) -("Laws"). If a charge is made that You are not -complying with any such Laws, You will promptly -notify Tenable of such charges in writing. -Without limiting the foregoing, You agree to -comply with all U.S. export Laws and applicable -export Laws of Your locality (if You are not in -the United States), to ensure that no information -or technical data provided pursuant to this -Agreement is exported or re-exported directly or -indirectly in violation of Law or without first -obtaining all required authorizations or -licenses. You will, at Your sole cost and -expense, obtain and maintain in effect all -permits, licenses, approvals and other consents -related to Your obligations under this Agreement. - You agree, at Your expense, to comply with all -foreign exchange and other Laws applicable to -You. The Software is licensed subject to -Tenable's standard commercial agreement; Software -licensed for use by the United States government -is provided with "Restricted Rights" only as -defined in 48 C.F.R. _52.227-14 and 48 C.F.R. -_252.227-7014 if the commercial terms are deemed -not to apply. - -13. Termination. -(a) You may terminate this Agreement at any time -by destroying or returning to Tenable the -Software, together with all copies, modifications -and merged portions of the Software in any form. -(b) This Agreement and Your License to use the -Software shall terminate automatically if You -fail to comply with any term or condition of this -Agreement. Immediately after termination of this -Agreement, You shall destroy or return to Tenable -the Software, together with all copies, -modifications and merged portions of the Software -in any form, and shall certify to Tenable in -writing that through Your best efforts and to the -best of your knowledge all such materials have -been destroyed or returned to Tenable and removed -from host computers on which Software resided. - -14. Governing Law. -This Agreement shall be governed in all respects -by the laws of the State of Maryland, USA, -without regard to choice-of-law rules or -principles. You expressly agree with Tenable -that this Agreement shall not be governed by the -U.N. Convention on Contracts for the -International Sale of Goods, the application of -which is expressly excluded. - -15. Dispute Resolution. -You and Tenable submit to the exclusive -jurisdiction of the courts of Howard County, -Maryland and the United States District Court for -Maryland, Baltimore Division, for any question or -dispute arising out of or relating to this -Agreement. Due to the high costs and time -involved in commercial litigation before a jury, -the parties waive all right to a jury trial with -respect to any and all issues in any action or -proceeding arising out of or related to this -Agreement. - -16. Notices. -Any notices or other communication required or -permitted to be made or given by either Party -pursuant to this Agreement will be in writing, in -English, and will be deemed to have been duly -given when delivered if delivered personally or -sent by recognized overnight express courier, to -the address specified herein or such other -address as Tenable may specify in writing. All -notices to Tenable shall be sent to the attention -of the Legal Department (unless otherwise -specified by Tenable). -All notices shall be sent to: -Tenable Network Security -7063 Columbia Gateway Drive, Suite 100 -Columbia, MD 21046 -Attn: Legal Department - -17. Transfer and Assignment. -You may not rent, lease, lend, sublicense or -otherwise provide the Software to any third -party. You may not assign or otherwise transfer -this Agreement without Tenable's prior written -consent. You may use the Software to provide -services to third parties as expressly provided -in this Agreement. - -18. Publicity. -You will not use Tenable's company name or any -trademarks, logos, service marks or other -intellectual property, or refer to Tenable or any -of its employees, in any form of advertising, -publicity or release without the prior written -approval of Tenable, which Tenable may withhold -in its sole discretion. - -19. Language. -The language of this Agreement is English and all -notices given under this Agreement must be in -English to be effective. No translation, if any, -of this Agreement or any notice will be of any -effect in the interpretation of this Agreement or -in determining the intent of the parties. The -parties have expressly agreed that all invoices -and related documents be drafted in English. - -20. Third Parties. -This Agreement is not intended nor will it be -interpreted to confer any benefit, right or -privilege in any person or entity not a party to -this Agreement. Any party who is not a party to -this Agreement has no right under any Law to -enforce any term of this Agreement. - -21. Trademarks. -Nessus is a trademark of Tenable. Tenable does -not grant to You, either expressly or by -implication, any license or permission under this -Agreement to use any of the Tenable marks -(including trademarks, service marks, trade -names, trade dress, symbols, logos, designs, -domain names, slogans and other source -identifiers) (collectively, the "Marks"). - -22. General. -This Agreement constitutes the entire agreement -between the parties, and supersedes all other -prior or contemporaneous communications between -the parties (whether written or oral) relating to -the subject matter of this Agreement. No -supplement, modification or amendment of this -Agreement shall be binding, unless executed in -writing by a duly authorized representative of -each party to this Agreement. The provisions of -this Agreement will be deemed severable, and the -unenforceability of any one or more provisions -will not affect the enforceability of any other -provisions. In addition, if any provision of -this Agreement, for any reason, is declared to be -unenforceable, the parties will substitute an -enforceable provision that, to the maximum extent -possible under applicable law, preserves the -original intentions and economic positions of the -parties. No failure or delay by a party in -exercising any right, power or remedy will -operate as a waiver of that right, power or -remedy, and no waiver will be effective unless it -is in writing and signed by the waiving party. -If a party waives any right, power or remedy, the -waiver will not waive any successive or other -right, power or remedy the party may have under -this Agreement. Any provision of this Agreement -that imposes or contemplates continuing -obligations on a party will survive the -expiration or termination of this Agreement. -"Including" and its derivatives (such as -"include" and "includes") mean including without -limitation; this term is as defined, whether or -not capitalized in this Agreement. -EXHIBIT A -TENABLE NETWORK SECURITY, INC. -SUBSCRIPTION AGREEMENT - -This is a legal agreement ("Subscription -Agreement") between Tenable Network Security, -Inc., a Delaware corporation having offices at -7063 Columbia Gateway Drive, Suite 100, Columbia, MD -21046 ("Tenable"), and you, the party downloading -the Plugins as defined below ("You"), through -Tenable's Subscription service as defined below. -This Subscription Agreement covers your permitted -use of the Plugins. BY CLICKING BELOW YOU -INDICATE YOUR ACCEPTANCE OF THIS SUBSCRIPTION -AGREEMENT AND YOU ACKNOWLEDGE THAT YOU HAVE READ -ALL OF THE TERMS AND CONDITIONS OF THIS -SUBSCRIPTION AGREEMENT, UNDERSTAND THEM, AND -AGREE TO BE LEGALLY BOUND BY THEM. If You do not -agree with the terms of this Subscription -Agreement, You may not use the Plugins as defined -below. The Plugins can only be provided to You -by Tenable. - -1) Grant of Plugins License. -i) Grant. Subject to the terms and conditions, -and your acceptance, of this Subscription -Agreement, Tenable grants to You a perpetual, -non-exclusive, non-transferable license (the -"License") in object code form only to use the -Plugins (a) solely for Your internal operations -and internal security purposes to seek and assess -information technology vulnerabilities events for -Your own networks; and (b) to provide services to -third parties to seek and assess information -technology vulnerabilities events on the third -party's network. Any rights in the Plugins not -granted in this Subscription Agreement are -expressly reserved by Tenable. -ii) Definition of Plugins. The term "Plugins" -means (i) any plugins (and related updates) that -are marked as copyrighted by Tenable. Any -plugins or components that are not marked as -copyrighted by Tenable are not Plugins as defined -under this Subscription Agreement and are subject -to other license terms. -iii) Use. You agree to use the Plugins only in -conjunction with Nessus or NeWT vulnerability -scanner programs obtained directly from -www.nessus.org or www.tenablesecurity.com and -registered with Tenable ("Registered Scanners") -and for which You have paid the applicable fee, -if any. Your use of the Plugins will be in -accordance with one of the Subscriptions -described in Section 2 below. - -2) Subscriptions. -i) General. The Registered Feed Subscription and -Direct Feed Subscription include vulnerability -detection programs not developed by Tenable or -its licensors, which are licensed to You under -separate agreements. The terms and conditions of -this Subscription Agreement do not apply to such -vulnerability detection programs. -ii) Registered Feed Subscription. The Registered -Feed Subscription permits You to use the Plugins -in conjunction with Registered Scanners to detect -vulnerabilities only on your system or network or -on the system or network of a third party for -which you perform scanning services, auditing -services, incident response services, -vulnerability assessment services or other -security consulting services. -iii) Direct Feed Subscription. The Direct Feed -Subscription permits You to use the Plugins in -conjunction with Registered Scanners to detect -vulnerabilities only on your system or network or -on the system or network of a third party for -which you perform scanning services, auditing -services, incident response services, -vulnerability assessment services or other -security consulting services; provided that You -have paid the applicable annual subscription fee -for each Registered Scanner in conjunction with -which You will use the Plugins. You will receive -the Direct Feed Subscription and email support if -you use this Direct Feed Subscription with the -Supported commercial version of Nessus (for -clarification, a commercial version of Nessus -means Nessus version 3 or better which was -developed, copyrighted and distributed by Tenable -and not released as open source or licensed under -the GPL). The term "Supported" means the list of -Operating System distribution(s) included in the -Plugin FAQ or Nessus FAQ found on any Tenable -website, including www.nessus.org. For the -Direct Feed Subscription, You agree to pay a -subscription fee to Tenable for each system on -which you have installed a Registered Scanner. - -3) Term. -This Subscription Agreement commences on the date -on which You execute this Subscription Agreement -or download, install or use the Plugins -(whichever occurs first) (the "Effective Date") -and continues until it is terminated according to -the terms of this Subscription Agreement. - -4) Intellectual Property. -This Subscription Agreement does not transfer to -You any title to or any ownership right or -interest in the Plugins. You acknowledge that -Tenable owns and retains all right, title and -interest in and to the Plugins. All -enhancements, modifications and derivative works -that Tenable makes to the Plugins or accompanying -documentation, and all intellectual property -rights therein, will be the property of Tenable. -Your rights with respect to the Plugins are -limited to the right to use the Plugins pursuant -to the terms and conditions in this Subscription -Agreement. - -5) No Reverse Engineering, Other Restrictions. -You may not directly or indirectly: (i) sell, -lease, redistribute or transfer any of the -Plugins on a stand-alone basis; (ii) decompile, -disassemble, reverse engineer, or otherwise -attempt to derive, obtain or modify the source -code of the Plugins; (iii) reproduce, modify, -translate or create derivative works of all or -part any of the Plugins; (iv) rent, lease or loan -the Plugins in any form to any third party or -otherwise allow a third party to use the Plugins; -or (v) remove, alter or obscure any proprietary -notice, labels, or marks on the Plugins. You may -not sublicense any of the rights granted to You -in this Subscription Agreement. You may not -distribute or otherwise provide Plugins to third -parties. You are responsible for all use of the -Plugins and for compliance with this Subscription -Agreement; any breach by You or any user using -the Plugins on Your behalf shall be deemed to -have been made by You. - -6) Restrictions on Third Party Use and Access. - You agree not to deliver or otherwise -make available the Plugins, in whole or in part, -to any party other than Tenable, except for -purposes specifically related to Your use of the -Plugins without Tenable's prior written consent. -You agree to use Your best efforts and to take -all reasonable steps to ensure that no -unauthorized parties have access to the Plugins -and that no unauthorized copy, publication, -disclosure or distribution of the Plugins, in -whole or in part, in any form is made by You or -any third party. You agree to notify Tenable of -any unauthorized access to, or use, copying, -publication, disclosure or distribution of the -Plugins. You acknowledge that the Plugins -contains valuable confidential information and -trade secrets of Tenable or its affiliates and -their licensors or suppliers, and that -unauthorized access to, or use, copying, -publication, disclosure or distribution of the -Plugins is harmful to Tenable or its affiliates -and their licensors or suppliers. - -7) Confidentiality. -As used in this Subscription Agreement, -"Confidential Information" means any and all -information and material that: (i) gives of -Tenable some competitive business advantage or -the opportunity of obtaining such advantage or is -otherwise confidential or a trade secret; (ii) is -marked "Confidential," "Restricted," or -"Confidential Information" or other similar -marking; (iii) is known by You to be confidential -or proprietary; or (iv) from all the relevant -circumstances, should reasonably be assumed by -You to be confidential or proprietary. -Confidential Information includes the Plugins and -Subscriptions. Confidential Information does not -include any information that You can prove: (a) -was already known to You without restrictions at -the time of its disclosure by Tenable; (b) after -its disclosure by Tenable, is made known to You -without restrictions by a third party having the -right to do so; (c) is or becomes publicly known -without violation of this Subscription Agreement; -or (d) is independently developed by You without -reference to the Confidential Information. -Confidential Information will remain the property -of Tenable, and You will not be deemed by virtue -of this Subscription Agreement or any access to -the Confidential Information to have acquired any -right, title or interest in or to the -Confidential Information. You may not copy any -Confidential Information without Tenable's prior -written permission. You may not remove any -copyright, trademark, proprietary rights or other -notices included in or affixed to any -Confidential Information. You may not use the -Confidential Information for Your or a third -party's benefit, competitive development or any -other purpose. You agree: (I) to hold the -Confidential Information in strict confidence; -(II) to limit disclosure of the Confidential -Information to Your own employees having a need -to know the Confidential Information for the -purposes of this Subscription Agreement; (III) -not to disclose any Confidential Information to -any third party; (IV) to use the Confidential -Information solely and exclusively in accordance -with the terms of this Subscription Agreement in -order to carry out Your obligations and exercise -Your rights under this Subscription Agreement; -(V) to afford the Confidential Information at -least the same level of protection against -unauthorized disclosure or use as You normally -uses to protect Your own information of a similar -character, but in no event less than reasonable -care; and (VI) to notify Tenable promptly of any -unauthorized use or disclosure of the -Confidential Information and to cooperate with -and assist Tenable in every reasonable way to -stop or minimize such unauthorized use or -disclosure. You agree that if a court of -competent jurisdiction determines that You have -breached, or attempted or threatened to breach, -Your confidentiality obligations to Tenable or -Tenable's proprietary rights, money damages, -Tenable will suffer irreparable harm and that -monetary damages will be inadequate to compensate -Tenable for such breach. Accordingly, Tenable, -in addition to and not in lieu of any other -rights, remedies or damages available to it at -law or in equity, shall be entitled to seek -appropriate injunctive relief and other measures -restraining further attempted or threatened -breaches of such obligations without requirement -to post any bond. - -8) Disclaimer of Warranties. - YOU EXPRESSLY AGREE THAT USE OF THE -PLUGINS AND THE SUBSCRIPTIONS ARE AT YOUR SOLE -RISK. THE SUBSCRIPTONS ARE AVAILABLE STRICTLY ON -AN "AS IS" AND "AS AVAILABLE" BASIS. TENABLE -DOES NOT MAKE ANY WARRANTIES OF ANY KIND, WHETHER -EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY -WARRANTIES OF TITLE, NON-INFRINGEMENT, -MERCHANTABILITY, FITNESS FOR A PARTICULAR -PURPOSE, INTEGRATION, PERFORMANCE AND ACCURACY, -AND ANY IMPLIED WARRANTIES ARISING FROM STATUTE, -COURSE OF DEALING, COURSE OF PERFORMANCE OR USAGE -OF TRADE, OTHER THAN THOSE WARRANTIES WHICH ARE -IMPLIED BY AND INCAPABLE OF EXCLUSION, -RESTRICTION, OR MODIFICATION UNDER APPLICABLE -LAW. TENABLE MAKES NO WARRANTY THAT THE PLUGINS -OR SUBSCRIPTIONS WILL OPERATE ERROR-FREE, FREE OF -ANY SECURITY DEFECTS OR IN AN UNINTERRUPTED -MANNER. - -9) Limitation of Liability. -IF YOU SHOULD BECOME ENTITLED TO CLAIM DAMAGES -FROM TENABLE (INCLUDING FOR NEGLIGENCE, STRICT -LIABILITY, BREACH OF CONTRACT, MISREPRESENTATION -AND OTHER CONTRACT OR TORT CLAIMS) TENABLE WILL -BE LIABLE ONLY FOR THE AMOUNT OF YOUR ACTUAL -DIRECT DAMAGES, NOT TO EXCEED (IN THE AGGREGATE -FOR ALL CLAIMS) THE FEES, IF ANY, YOU PAID TO -TENABLE - -10) Exclusion of Other Damages. - UNDER NO CIRCUMSTANCES WILL TENABLE BE -LIABLE TO YOU OR ANY OTHER PERSON OR ENTITY FOR -ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, -EXEMPLARY OR PUNITIVE DAMAGES (INCLUDING -NEGLIGENCE, STRICT LIABILITY, BREACH OF CONTRACT, -MISREPRESENTATION AND OTHER CONTRACT OR TORT -CLAIMS; LOST PROFITS; OR ANY DAMAGES RESULTING -FROM LOSS OF DATA, SECURITY BREACH, PROPERTY -DAMAGE, LOSS OF REVENUE, LOSS OF BUSINESS OR LOST -SAVINGS), ARISING OUT OF OR IN CONNECTION WITH -THIS SUBSCRIPTION AGREEMENT, THE PERFORMANCE OF -THE PLUGINS OR SUBSCRIPTIONS OR OF ANY OTHER -OBLIGATIONS RELATING TO THIS SUBSCRIPTION -AGREEMENT, WHETHER OR NOT TENABLE HAS BEEN -ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOU -ARE SOLELY RESPONSIBLE AND LIABLE FOR VERIFYING -THE SECURITY, ACCURACY AND ADEQUACY OF ANY OUTPUT -FROM THE PLUGINS AND SUBSCRIPTIONS, AND FOR ANY -RELIANCE THEREON. - -11) Additional Provisions Regarding Liability. -The parties agree that the foregoing limitations -will not be read so as to limit any liability to -an extent that would not be permitted under -applicable law and specifically will not limit -any liability for gross negligence, intentional -tortious or unlawful conduct or damages for -strict liability that may not be limited by law. - -12) Indemnification. -Each of the parties acknowledges and agrees that -by entering into and performing its obligations -under this Subscription Agreement, Tenable will -not assume and should not be exposed to the -business and operational risks associated with -Your business. You acknowledge that Your use of -the Plugins and Subscriptions is only a portion -of Your overall security solution and that -Tenable is not responsible for Your overall -security solution. As between You and Tenable, -You are (and Tenable is not) responsible for the -success or failure of such security solution. -Accordingly, You agree that you will, at your -expense, indemnify, defend and hold Tenable -harmless in all claims and actions that seek -compensation of any kind for injury or death to -persons and/or for damage to property, and that -arise out of or relate to Your security solutions -or Your use of the Plugins and Subscriptions, or -the solutions You provide to a third party -through Your use of the Plugins and -Subscriptions. You also agree to pay all -settlements, costs, damages, legal fees and -expenses finally awarded in all such claims and -actions. - -13) Your Payment Obligations. -If You obtain a Direct Feed Subscription, You -agree to pay any and all amounts due or incurred -by You as specified in the invoice provided by -Tenable in consideration for Your obtaining such -Direct Feed Subscription (the "Fees"). Payment -is due within thirty (30) days of the date of -invoice. You agree to pay directly or reimburse -Tenable for any taxes (including, sales or excise -taxes, value added taxes, landing fees, import -duties and the like), however designated and -whether foreign or domestic, arising out of this -Agreement, imposed on the Plugins or the use -thereof, or Tenable's performance under this -Agreement. You agree to pay Tenable's invoices -without deducting any present or future taxes, -withholdings or other charges except those -deductions it is legally required to make. If -You are legally required to make any deductions, -You agree to pay Tenable such amounts as are -necessary to make the net amounts remaining after -such deductions equal to the stated amount due -under this Agreement. The payments or -reimbursements will be in such amounts as are -sufficient to relieve Tenable from owing any -further taxes, either directly or on the basis of -the payments made under this Agreement. -Notwithstanding the foregoing, Tenable will be -solely responsible for its income tax obligations -and all employer reporting and payment -obligations with respect to its personnel. You -agree to pay any interest and penalties imposed -by any taxing authorities to the extent such -interest and penalties are applicable to taxes -not paid at Your request or as a result of -reliance by Tenable on Your representations. If -a certificate of exemption or similar document or -proceeding is necessary in order to exempt any -transaction from a tax, You will obtain such -certificate or document. -14) Legal Compliance; Restricted Rights. -The Plugins and Subscriptions are provided solely -for lawful purposes and use. You are solely -responsible for, and agree to perform your -obligations in a manner that complies with all -applicable national, regional and local laws, -statutes, ordinances, regulations, codes and -other types of government authority (including -those governing export control, unfair -competition, anti-discrimination, false -advertising, privacy and data protection, and -publicity and those identifying and procuring -required permits, licenses, approvals, and other -consents) ("Laws"). If a charge is made that You -are not complying with any such Laws, You will -promptly notify Tenable of such charges in -writing. Without limiting the foregoing, You -agree to comply with all U.S. export Laws and -applicable export Laws of Your locality (if You -are not in the United States), to ensure that no -information or technical data provided pursuant -to this Subscription Agreement is exported or -re-exported directly or indirectly in violation -of Law or without first obtaining all required -authorizations or licenses. You will, at Your -sole cost and expense, obtain and maintain in -effect all permits, licenses, approvals and other -consents related to Your obligations under this -Subscription Agreement. You agree, at Your -expense, to comply with all foreign exchange and -other Laws applicable to You. The Plugins is -licensed subject to Tenable's standard commercial -agreement; Plugins licensed for use by the United -States government is provided with "Restricted -Rights" only as defined in 48 C.F.R. _52.227-14 -and 48 C.F.R. _252.227-7014 if the commercial -terms are deemed not to apply. - -15) Termination. -i) You may terminate this Subscription Agreement -at any time by destroying or returning to Tenable -the Plugins, together with all copies, -modifications and merged portions of the Plugins -in any form. -ii) This Subscription Agreement and Your License -to use the Plugins and Subscriptions shall -terminate automatically if You fail to comply -with any term or condition of this Subscription -Agreement or if the Nessus Software License -Agreement between You and Tenable terminates. -Immediately after termination of this -Subscription Agreement, You shall destroy or -return to Tenable the Plugins, together with all -copies, modifications and merged portions of the -Plugins in any form, and shall certify to Tenable -in writing that through Your best efforts and to -the best of your knowledge all such materials -have been destroyed or returned to Tenable and -removed from host computers on which Plugins -resided. - -16) Governing Law. -This Subscription Agreement shall be governed in -all respects by the laws of the State of -Maryland, USA, without regard to choice-of-law -rules or principles. You expressly agree with -Tenable that this Subscription Agreement shall -not be governed by the U.N. Convention on -Contracts for the International Sale of Goods, -the application of which is expressly excluded. - -17) Dispute Resolution. -You and Tenable submit to the exclusive -jurisdiction of the courts of Howard County, -Maryland and the United States District Court for -Maryland, Baltimore Division, for any question or -dispute arising out of or relating to this -Subscription Agreement. Due to the high costs -and time involved in commercial litigation before -a jury, the parties waive all right to a jury -trial with respect to any and all issues in any -action or proceeding arising out of or related to -this Subscription Agreement. - -18) Notices. -Any notices or other communication required or -permitted to be made or given by either Party -pursuant to this Subscription Agreement will be -in writing, in English, and will be deemed to -have been duly given when delivered if delivered -personally or sent by recognized overnight -express courier, to the address specified herein -or such other address as Tenable may specify in -writing. All notices to Tenable shall be sent to -the attention of the Legal Department (unless -otherwise specified by Tenable). -All notices shall be sent to: -Tenable Network Security -7063 Columbia Gateway Drive, Suite 100 -Columbia, MD 21046 -Attn: Legal Department - -19) Transfer and Assignment. -You may not rent, lease, lend, sublicense or -otherwise provide the Plugins to any third party. -You may not assign or otherwise transfer this -Subscription Agreement without Tenable's prior -written consent. You may use the Plugins and -Subscriptions to provide services to third -parties as expressly provided in this -Subscription Agreement. - -20) Publicity. -You will not use Tenable's company name or any -trademarks, logos, service marks or other -intellectual property, or refer to Tenable or any -of its employees, in any form of advertising, -publicity or release without the prior written -approval of Tenable, which Tenable may withhold -in its sole discretion. - -21) Language. -The language of this Subscription Agreement is -English and all notices given under this -Subscription Agreement must be in English to be -effective. No translation, if any, of this -Subscription Agreement or any notice will be of -any effect in the interpretation of this -Subscription Agreement or in determining the -intent of the parties. The parties have -expressly agreed that all invoices and related -documents be drafted in English. - -22) Third Parties. -This Subscription Agreement is not intended nor -will it be interpreted to confer any benefit, -right or privilege in any person or entity not a -party to this Subscription Agreement. Any party -who is not a party to this Subscription Agreement -has no right under any Law to enforce any term of -this Subscription Agreement. - -23) Trademarks. -Nessus is a trademark of Tenable. Tenable does -not grant to You, either expressly or by -implication, any license or permission under this -Subscription Agreement to use any of the Tenable -marks (including trademarks, service marks, trade -names, trade dress, symbols, logos, designs, -domain names, slogans and other source -identifiers) (collectively, the "Marks"). - -24) General. -This Subscription Agreement constitutes the -entire agreement between the parties, and -supersedes all other prior or contemporaneous -communications between the parties (whether -written or oral) relating to the subject matter -of this Subscription Agreement. No supplement, -modification or amendment of this Subscription -Agreement shall be binding, unless executed in -writing by a duly authorized representative of -each party to this Subscription Agreement. The -provisions of this Subscription Agreement will be -deemed severable, and the unenforceability of any -one or more provisions will not affect the -enforceability of any other provisions. In -addition, if any provision of this Subscription -Agreement, for any reason, is declared to be -unenforceable, the parties will substitute an -enforceable provision that, to the maximum extent -possible under applicable law, preserves the -original intentions and economic positions of the -parties. No failure or delay by a party in -exercising any right, power or remedy will -operate as a waiver of that right, power or -remedy, and no waiver will be effective unless it -is in writing and signed by the waiving party. -If a party waives any right, power or remedy, the -waiver will not waive any successive or other -right, power or remedy the party may have under -this Subscription Agreement. Any provision of -this Subscription Agreement that imposes or -contemplates continuing obligations on a party -will survive the expiration or termination of -this Subscription Agreement. "Including" and its -derivatives (such as "include" and "includes") -mean including without limitation; this term is -as defined, whether or not capitalized in this -Subscription Agreement. @@ -1,29 +1,43 @@ # Maintainer: MattWoelk +# Contributor: xsmile <sascha_r gmx de> +_retoken='.*hidden">(\w+)<.*' pkgname=nessus pkgver=6.8.0 pkgrel=1 -_bigver=Nessus-$pkgver-fc20 -pkgdesc='Vulnerability scanner' +_filename="${pkgname^}-${pkgver}-fc20.x86_64.rpm" +pkgdesc="Vulnerability scanner" arch=('x86_64') depends=('openssl' 'gnupg') license=('custom') -url='https://www.nessus.org' -install=nessus.install +url="https://www.nessus.org" +install=${pkgname}.install -# Download the rpm from <http://www.tenable.com/products/nessus/select-your-operating-system> -# Nessus-6.8.0-fc20.x86_64.rpm -./getnessus.sh +_gettoken() { + token=$(curl -s https://www.tenable.com/products/nessus/select-your-operating-system#tos | \ -source=($_bigver.x86_64.rpm + sed -nr "s/${_retoken}/\1/p") + + if [[ "$token" == "" ]]; then + echo + echo "\n==> ERROR: Could not get the download token" + exit 1 + fi + + echo $token +} +_token=$(_gettoken) +_pkgurl="https://downloads.nessus.org/nessus3dl.php?file=${_filename}&licence_accept=yes&t=${_token}" + +source=("${_filename}::${_pkgurl}" nessus.sh - LICENSE.NESSUS - nessus.install) + LICENSE) + md5sums=('4106308f11c6b56f05932ee7bf9e71e1' '8c5772ac63f97d94475fe03e80d6ba5c' - '8ff98bc9488304fcb66753d3cfb5f30e' - 'd9d25d4075acc50c0050c7a4f244c7cb') - package() { + '1db6df5a39009ace46c7ee40141ece1b') + +package() { install -Dm755 $pkgname.sh "$pkgdir/etc/profile.d/$pkgname.sh" mkdir -p "$pkgdir/etc/ld.so.conf.d" "$pkgdir/usr/share" "$pkgdir/opt/nessus" \ @@ -38,5 +52,5 @@ md5sums=('4106308f11c6b56f05932ee7bf9e71e1' cp -a opt/nessus/{bin,com,etc,lib,sbin,var} "$pkgdir/opt/nessus" # license - install -Dm644 LICENSE.NESSUS "$pkgdir/usr/share/licenses/nessus/LICENSE.NESSUS" + install -Dm644 LICENSE "$pkgdir/usr/share/licenses/nessus/LICENSE" } diff --git a/nessus.install b/nessus.install index 9c72eadc72ae..4b91e9d7e51e 100644 --- a/nessus.install +++ b/nessus.install @@ -1,11 +1,69 @@ +NESSUS_NAME="Nessus" +NESSUS_PRODUCT="nessus" +NESSUS_PREFIX="/opt/nessus" +NESSUS_SERVICE_NAME="nessusd" +NESSUS_SERVICE_BIN="${NESSUS_PREFIX}/sbin/nessus-service" +NESSUSD_BIN="${NESSUS_PREFIX}/sbin/nessusd" + +pre_install() { + if [[ -f /usr/lib/systemd/system/${NESSUS_SERVICE_NAME}.service ]]; then + systemctl stop ${NESSUS_SERVICE_NAME}.service + fi + + # Because we did not used to shut down on uninstall, we might have some random nessusd's running on the system (see NES-3585) + # We therefore need to do a killall before we install a new nessusd + + # Look at all the proc entries and kill all nessus-service and nessusd processes with the correct path + for dir in /proc/[0-9]*; do + full_exe_path=$(readlink ${dir}/exe) + pid=$(basename ${dir}) + if [[ "$full_exe_path" == "$NESSUS_SERVICE_BIN"* || "$full_exe_path" == "$NESSUSD_BIN"* ]]; then + kill $pid + fi + done +} + post_install() { - echo "See https://wiki.archlinux.org/index.php/Nessus and the nessus man pages for documentation." - ldconfig + if [ "$NESSUS_PRODUCT" != "agent" ]; then + echo "Unpacking $NESSUS_NAME Core Components..." + ${NESSUS_PREFIX}/sbin/nessuscli install ${NESSUS_PREFIX}/var/nessus/plugins-core.tar.gz + fi + + test -f ${NESSUS_PREFIX}/etc/nessus/nessusd.conf || ${NESSUS_PREFIX}/sbin/nessusd -g + + test -f ${NESSUS_PREFIX}/etc/nessus/nessus-fetch.rc && { + echo "Fetching the newest plugins from nessus.org..." + rm -f ${NESSUS_PREFIX}/lib/nessus/plugins/MD5 + ${NESSUS_PREFIX}/sbin/nessuscli update --plugins-only + ${NESSUS_PREFIX}/sbin/nessusd -R + } + + if [ "$NESSUS_PRODUCT" = "agent" ]; then + echo " - First, link this agent to the Nessus Manager with the '$NESSUS_PREFIX/sbin/nessuscli agent' command." + echo " Type '$NESSUS_PREFIX/sbin/nessuscli agent help' for more info." + echo " - You can start $NESSUS_NAME by typing systemctl start $NESSUS_SERVICE_NAME" + else + echo + echo " - You can start $NESSUS_NAME by typing systemctl start $NESSUS_SERVICE_NAME" + echo " - Then go to https://"$(hostname)":8834/ to configure your scanner" + echo + fi + + echo " - See https://wiki.archlinux.org/index.php/Nessus for documentation." + echo + ldconfig } pre_remove() { - if [ -f /opt/nessus/var/nessus/nessusd.pid ]; then - echo "Shutting down the Nessus server." - kill $(cat /opt/nessus/var/nessus/nessusd.pid) >/dev/null 2>&1 - fi + if [[ -f /usr/lib/systemd/system/${NESSUS_SERVICE_NAME}.service ]]; then + systemctl stop ${NESSUS_SERVICE_NAME}.service + fi } + +post_remove() { + test -f ${NESSUS_PREFIX}/sbin/nessusd || { \ + rm -f ${NESSUS_PREFIX}/var/nessus/plugins-code.db + rm -f ${NESSUS_PREFIX}/var/nessus/plugins-desc.db + } +} + |