Scan prefs

CHANGELOG.md

@@ -33,6 +33,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Move alive detection module (Boreas) into gvm-libs [#519](https://github.com/greenbone/openvas/pull/519)
 - Allow to set all legal types of icmp v6 in icmp header in openvas-nasl. [#542](https://github.com/greenbone/openvas/pull/542)
 - The output of the NASL dump_* packet forgery functions was made consistent. [#555](https://github.com/greenbone/openvas/pull/555)
+- Make drop_privileges setting a scanner-only preference. [#557](https://github.com/greenbone/openvas/pull/557)
 
 ### Fixed
 - Improve signal handling when update vhosts list. [#425](https://github.com/greenbone/openvas/pull/425)

src/openvas.c

@@ -262,6 +262,10 @@ load_scan_preferences (struct scan_globals *globals)
 
               g_free (file_hash);
             }
+          else if (is_scanner_only_pref (pref[0]))
+            g_warning ("%s is a scanner only preference. It can not be written "
+                       "by the client and will be ignored.",
+                       pref_name[0]);
           else
             prefs_set (pref[0], pref[1] ?: "");
           g_strfreev (pref_name);

src/utils.c

@@ -256,6 +256,7 @@ is_scanner_only_pref (const char *pref)
       || !strcmp (pref, "log_plugins_name_at_load")
       || !strcmp (pref, "nasl_no_signature_check")
       || !strcmp (pref, "vendor_version")
+      || !strcmp (pref, "drop_privileges")
       /* Preferences starting with sys_ are scanner-side only. */
       || !strncmp (pref, "sys_", 4))
     return 1;