Using Mac Vulscan from the command line

With LANDesk Management Suite 9.5 and 9.6, we have some command line switches for vulscan.

usage: vulscan [-v version] [/repair <vulnerability or group name>] [/coreserver=<coreservername>] [/softwareupdate] /changebehaviors < /agentbehavior=filename | /ob:rebootbehavior=filename [/taskid=###] [/policyfile] [/scanfilter]

Parameters

• /v - LANDesk program version
• /repair - called with list of vulnerabilities to be repaired or group to be repaired
• /softwareupdate - used to notify vulscan that a call to software update was previously called and should not be called again
• /changebehaviors - if this parameter is the only parameter, the default setting in com.landesk.ldms.plist to be set to the behavior listed
• /agentbehavior - file name for the agent behavior to be applied. If -1 the file in com.landesk.ldms.plist will be used
• /ob:rebootbehavior - file name for the reboot behaviors to be applied. If -1 the file in com.landesk.ldms.plist will be used
• /taskid - if this is set to -1 then no status will be sent back to the core
• /policyfile - name of policy file to get scan information from
• /scanfilter - filter of vulnerabilities to scan