Do not scan fragile devices

#
# (C) Tenable Network Security, Inc.
#

# @PREFERENCES@


include("compat.inc");

if(description)
{
 script_id(22481);
 script_version("1.18");
 script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/13");

  script_xref(name:"IAVB", value:"0001-B-0525");

 script_name(english:"Do not scan fragile devices");

 script_set_attribute(attribute:"synopsis", value:
"This script offers a way to control scanning of fragile devices." );
 script_set_attribute(attribute:"description", value:
"This script offers a way to control scanning of certain categories of
network devices and hosts that are considered 'fragile' and might
crash if probed." );
 script_set_attribute(attribute:"risk_factor", value:"None" );
 script_set_attribute(attribute:"solution", value:"n/a" );
 script_set_attribute(attribute:"plugin_publication_date", value: "2006/10/02");
 script_set_attribute(attribute:"plugin_type", value:"settings");
 script_end_attributes();

 script_family(english:"Settings");
 script_summary(english:"Define which type of hosts can or can not be scanned");
 script_copyright(english:"This script is Copyright (C) 2006-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
 script_category(ACT_INIT);

 script_add_preference(name:"Scan Network Printers", type:"checkbox", value:"no");
 script_add_preference(name:"Scan Novell Netware hosts", type:"checkbox", value:"no");
 script_add_preference(name:"Scan Operational Technology devices", type:"checkbox", value:"no");
 exit(0);
}

include("data_protection.inc");

function dont_scan_settings_network_printers( opt )
{
 # if opt "yes" then scan printers
 # if opt not "yes" / "no" then dont scan printers
 # if opt null and unsafe checks then scan printers
 if ( opt )
 {
  if ( "yes" >< opt )
  {
   # opt "yes" then scan printers
   set_kb_item(name:"dont_scan_settings/network_printers/option", value:opt);
   set_kb_item(name:"Scan/Do_Scan_Printers", value:TRUE);
  }
  if ( "no" >< opt )
  {
    set_kb_item(name:"dont_scan_settings/network_printers/option", value:opt);
  }
  # else opt is not yes, dont scan printers
 }
 else if ( safe_checks() == 0 )
 {
  # opt null and unsafe checks then scan printers
  set_kb_item(name:"Scan/Do_Scan_Printers", value:TRUE);
 }
}


function dont_scan_settings_novell( opt )
{
 # if opt "yes" then scan novell
 # if opt not "yes" / "no" then dont scan novell
 # if opt null and unsafe checks then scan novell
 if ( opt )
 {
  if ( "yes" >< opt )
  {
   # opt "yes" then scan novell
   set_kb_item(name:"Scan/Do_Scan_Novell", value:TRUE);
  }
  # else opt is not yes, dont scan novell
 }
 else if ( safe_checks() == 0 )
 {
  # opt null and unsafe checks then scan novell
  set_kb_item(name:"Scan/Do_Scan_Novell", value:TRUE);
 }
}

function dont_scan_settings_ot(opt, all)
{
  replace_kb_item(name: "Scan/Do_Scan_OT", value: "yes" >< all);
  replace_kb_item(name: "Scan/Scan_OT_with_Scout", value: "yes" >< opt);
}

##
# set the required parameters to determine if data protection
# settings need to be enabled for GDPR
##
function dont_scan_settings_gdpr(opt)
{
  if (!isnull(opt))
  {
    set_kb_item(name:data_protection::DPKB_IPADDR, value:TRUE);
    set_kb_item(name:data_protection::DPKB_USERNAME, value:TRUE);
    set_kb_item(name:data_protection::DPKB_PHONENUMBER, value:TRUE);
    set_kb_item(name:data_protection::DPKB_ENABLED, value:TRUE);
  }
}

# Perform all actions of this module from function scope
function dont_scan_settings(
 pref_scan_network_printers,
 pref_scan_novell_netware_hosts,
 pref_scan_operational_technology_devices,
 pref_scan_ot_with_everything,
 pref_scan_gdpr_dataprotection )
{
 set_kb_item(name:"/tmp/settings", value:TRUE);
 dont_scan_settings_network_printers(opt:pref_scan_network_printers);
 dont_scan_settings_novell(opt:pref_scan_novell_netware_hosts);
 dont_scan_settings_ot(opt:pref_scan_operational_technology_devices,
                       all:pref_scan_ot_with_everything);
 dont_scan_settings_gdpr(opt:pref_scan_gdpr_dataprotection);
}

# perform required actions off this module
dont_scan_settings(
 pref_scan_network_printers:script_get_preference("Scan Network Printers"),
 pref_scan_novell_netware_hosts:script_get_preference("Scan Novell Netware hosts"),
 pref_scan_operational_technology_devices:get_preference("Do not scan fragile devices[checkbox]:Scan Operational Technology devices safely"),
 pref_scan_ot_with_everything:get_preference("Do not scan fragile devices[checkbox]:Scan Operational Technology devices"),
 pref_scan_gdpr_dataprotection:get_preference("tenableio.gdpr")
 );