OS Identification : Linux Distribution

#%NASL_MIN_LEVEL 70300
##
# (C) Tenable, Inc.
##

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(25335);
  script_version("1.53");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/05");

  script_name(english:"OS Identification : Linux Distribution");

  script_set_attribute(attribute:"synopsis", value:
"It is possible to identify the remote operating system by looking at
certain files.");
  script_set_attribute(attribute:"description", value:
"This plugin attempts to identify the operating system type and version
by looking at certain files on the remote operating system (e.g.,
'/etc/redhat-release' on Red Hat).");
  script_set_attribute(attribute:"solution", value:"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2007/05/25");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"asset_inventory", value:"True");
  script_set_attribute(attribute:"os_identification", value:"True");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"General");

  script_copyright(english:"This script is Copyright (C) 2007-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("os_fingerprint_uname.nasl");
  script_require_keys("Host/OS/uname");

  exit(0);
}

if (get_kb_item('Host/OS/LinuxDistribution'))
  exit(0, 'The Linux distribution has already been identified.');

var kernel, os, v, pl, kylinType, matches, uvp;

kernel = get_kb_item_or_exit("Host/OS/uname");
if ( "Linux Kernel" >!< kernel && "Wind River Linux" >!< kernel )
  exit(0, "The host does not appear to be a Linux OS based on the uname output.");

if (kernel =~ "^Linux Kernel [^ ]+ on ")
  exit(0, "Linux distribution has already been identified.");

os = get_kb_item("Host/RedHat/release");

if ( ! os )
{
  os = get_kb_item("Host/AmazonLinux/release");
  if (os) os = "Amazon Linux AMI " + (os - "ALA");
}

if ( ! os )
{
  os = get_kb_item("Host/McAfeeLinux/release");
  if (os) os = "McAfee Linux OS " + (os - "MLOS");
}

if ( ! os ) os = get_kb_item("Host/CentOS/release");

if ("NSM" >< os) os = "Juniper NSM";

if ( ! os )
{
  os = get_kb_item("Host/etc/mandrake-release");
  if (os)
    os = ereg_replace(pattern:"(Mageia|Mandrake Linux|Mandrakelinux|Mandriva Linux|Mandriva Business Server) release ([0-9]+(\.[0-9])?).*", string:os, replace:"\1 \2");
}

#Must precede SuSE because EMC RSA is SuSE
if ( ! os )
{
  os = get_kb_item("Host/EMC/AM/Version");
  if ( os )
  {
    os = "EMC RSA Authentication Manager Appliance " + os;
  }
}

if ( ! os )
{
  os = get_kb_item("Host/SuSE/release");
  if ( os )
  {
    v = pregmatch(string: os, pattern: "(SUSE|SLE[SD]|TDC)([0-9.]+)");
    if (! isnull(v))
    {
      if (v[1] == 'SUSE')
        os = 'openSUSE ' + v[2];
      else if(v[1] == 'TDC')
        os = 'Teradata SLES ' + v[2];
      else os = 'SuSE' + v[2];
    }
    else if ("SUSE" >< os)
    {
      os = str_replace(string: os, find:'SUSE', replace: 'SuSE');
    }
    if (os !~ 'SuSE[0-9]+\\.[0-9]')
    {
      pl = get_kb_item("Host/SuSE/patchlevel");
      if (! isnull(pl)) os += "." + int(pl);
    }
  }
}

if ( ! os )
  {
    os = get_kb_item("Host/Gentoo/release");
    if ( os && substr(os, 0, 6) != "Gentoo ") os = "Gentoo " + os;
  }

if ( ! os )
{
  os = get_kb_item("Host/Slackware/release");
  if (os =~ "^[0-9]") os = "Slackware " + os;
}

if ( ! os )
{
  os = get_kb_item("Host/Ubuntu/release");
  if ( os ) os = "Ubuntu " + os;
}

if ( ! os )
{
  os = get_kb_item("Host/UOS/release");
  if ( os ) os = "Unity Operating System " + os;
}

if ( ! os )
{
  os = get_kb_item("Host/UOS-Server/release");
  if ( os ) os = "Unity Operating System " + os;
}

if ( ! os )
{
  os = get_kb_item("Host/KylinOS/release");
  kylinType = "Kylin Desktop ";
  if ("server" >< get_kb_item("Host/KylinOS/type")) kylinType = "Kylin Advanced Server ";
  if ( os ) os = kylinType + os;
}

if ( ! os )
{
  os = get_kb_item("Host/Debian/release");
  if ( os ) os = "Debian " + os;
}

if ( ! os ) os = get_kb_item("Host/Junos_Space/release");

# Host/VMware/release=VMware ESX 4.0 (Kandinsky)\n
if(!os)
{
  os = get_kb_item("Host/VMware/release");
  if( os && "VMware ESX" >< os)
  {
    matches = pregmatch(pattern:"^VMware (ESXi? [0-9.]+).+",string:os);
    if (matches) os = "VMware " + matches[1];
  }
}

if(!os)
{
  os = get_kb_item("Host/EulerOS/release");
  uvp = get_kb_item("Host/EulerOS/uvp_version");
  if (!empty_or_null(uvp))
  {
    os = "EulerOS Virtualization " + uvp;
  }
}

if (!os)
{
  os = get_kb_item("Host/ZTE-CGSL/release");
  if (os) os = "NewStart " + os;
}

if (!os)
{
  # Cisco Nexus Switch has model version, firmware version
  #  and bootflash version.  Going with bootflash version.
  os = get_kb_item("Host/Cisco/firmware/bootflash_version");
  if (os) os = "Cisco Nexus Switch " + os;
}

if ( ! os )
{
  os = get_kb_item("Host/RockyLinux/release");
}
if ( ! os )
{
  os = get_kb_item("Host/TELCustomLinux/release");
}
if ( ! os )
{
  os = get_kb_item("Host/CBLMariner/release");
}

if ( ! os )
{
  os = get_kb_item("Host/AlmaLinux/release");
}

if (!os)
{
  os = get_kb_item("Host/Virtuozzo/release");
}
if (!os)
{
  os = get_kb_item("Host/MontaVista/release");
}
if (!os)
{
  os = get_kb_item("Host/Container Linux by CoreOS/release");
}
if (!os)
{
  os = get_kb_item("Host/RancherOS/release");
}
if (!os)
{
  os = get_kb_item("Host/WindRiver/release");
}

if (!os)
{
  os = get_kb_item("Host/OS/QNAP/QTS/release");
}
if (!os)
{
  os = get_kb_item("Host/OS/QNAP/QuTS hero/release");
}
if (!os)
{
  os = get_kb_item("Host/TencentOS/Product");
  if (os) os = "Tencent Linux";
}

if(!os)
{
  os = get_kb_item("Host/PhotonOS/release");
}

if(!os)
{
  os = get_kb_item("Host/AzureLinux/release");
}

if(!os)
{
  os = get_kb_item("Host/OracleVM/release");
}

if ( ! os )
{
  os = get_kb_item("Host/Alibaba/release");
}

if ( ! os )
{
  os = get_kb_item("Host/MiracleLinux/release");
}

if(!isnull(get_kb_item("Host/Avaya/Product")))
  os = get_kb_item("Host/Avaya/Product");

if ( os )
{
 os = chomp(os);
 set_kb_item(name:"Host/OS/LinuxDistribution", value:kernel + " on " + os);
 if("VMware ESX " >< os)
   set_kb_item(name:"Host/OS/LinuxDistribution/Type", value:"hypervisor");
 else
   set_kb_item(name:"Host/OS/LinuxDistribution/Type", value:"general-purpose");

 set_kb_item(name:"Host/OS/LinuxDistribution/Confidence", value:100);
}