Question about cve-bin-tool used

[jni2000]

In the EMBA Wiki "Installation -- EMBA update" section, it said:

You need a local cve-bin-tool installation. Usually this should be possible via pip:

while in F17_cve_bin_tool.sh
cve-bin-tool is referenced as below

local lCVE_BIN_TOOL="/external/cve-bin-tool/cve_bin_tool/cli.py"

My questions is which cve-bin-tool is used in emba for generating the cve-list? If the local installation, how was it linked to the definition in F17_cve_bin_tool.sh? If "/external/cve-bin-tool/cve_bin_tool/cli.py" is used, I did not see it in "emba/external" directory after installation. Did I miss any steps ?

Thanks

James

[m-1-k-3]

Hi James,

on the one hand we have the docker image. Within the docker image the cve-bin-tool is located in /external/cve-bin-tool. If you are updating the cve database on your host it is usually somewhere in your pip environment. If you have updated your cve database on your host and you copy it to the EMBA config directory then EMBA is using your database from your host. With this little trick you are able to update your cve database without loosing your fallback in your docker base image.

Hope this helps
Mike

[jni2000]

Thanks @m-1-k-3 !

So for copying the cve database on my host to the EMBA config directory, I just need to do the followings?

cve-bin-tool --export /config/cve-database.db

Best regards

[m-1-k-3]

What is your EMBA installation directory? You need to do something like

cve-bin-tool --export <Your EMBA installation directory>/config/cve-database.db

where is the directory you did the initial git clone to and you have your emba script with the config, modules and external directory

[jni2000]

Thanks. Yes, I did "cve-bin-tool --export /config/cve-database.db".

[jni2000]

Thanks, @m-1-k-3 , for your help!