From 0b0c2848c857b03af0000f96de39f5389ede9f12 Mon Sep 17 00:00:00 2001 From: 4fury-c3440d8 Date: Wed, 16 Nov 2022 10:23:14 +0300 Subject: [PATCH] clamav-0.105.1. --- util/antivirus/clamav/actions.py | 54 +- util/antivirus/clamav/comar/package.py | 4 +- util/antivirus/clamav/comar/service.py | 22 +- .../antivirus/clamav/files/clamav-milter.conf | 267 ---------- util/antivirus/clamav/files/clamav.conf | 1 - util/antivirus/clamav/files/clamd.conf | 479 ------------------ .../antivirus/clamav/files/daemon_confs.patch | 106 ++++ util/antivirus/clamav/files/freshclam.conf | 202 -------- util/antivirus/clamav/pspec.xml | 59 ++- 9 files changed, 171 insertions(+), 1023 deletions(-) delete mode 100644 util/antivirus/clamav/files/clamav-milter.conf delete mode 100644 util/antivirus/clamav/files/clamav.conf delete mode 100644 util/antivirus/clamav/files/clamd.conf create mode 100644 util/antivirus/clamav/files/daemon_confs.patch delete mode 100644 util/antivirus/clamav/files/freshclam.conf diff --git a/util/antivirus/clamav/actions.py b/util/antivirus/clamav/actions.py index bce46ebe41..d703de2c44 100644 --- a/util/antivirus/clamav/actions.py +++ b/util/antivirus/clamav/actions.py @@ -2,47 +2,35 @@ # -*- coding: utf-8 -*- # # Licensed under the GNU General Public License, version 3. -# See the file http://www.gnu.org/licenses/gpl.txt +# See the file https://www.gnu.org/licenses/gpl-3.0.txt -from pisi.actionsapi import autotools -from pisi.actionsapi import pisitools -from pisi.actionsapi import get -from pisi.actionsapi import shelltools +from pisi.actionsapi import shelltools, cmaketools, pisitools, get + +j = ''.join([ + ' -DENABLE_EXAMPLES=ON', + ' -DENABLE_MILTER=OFF', + ' -DENABLE_SYSTEMD=OFF', + ' -DAPP_CONFIG_DIRECTORY=/etc/clamav', + ' -DDATABASE_DIRECTORY=/var/lib/clamav', + ' -G Ninja', + ' -B_build -L ' + ]) def setup(): - #autotools.autoreconf("-fiv") - autotools.configure("--prefix=/usr \ - --sbindir=/usr/bin \ - --runstatedir=/run \ - --enable-id-check \ - --enable-clamdtop \ - --disable-static \ - --disable-clamav \ - --disable-fanotify \ - --disable-experimental \ - --disable-silent-rules \ - --with-system-tommath \ - --with-zlib=/usr \ - --with-no-cache \ - --with-user=clamav \ - --with-group=clamav \ - --disable-llvm \ - --with-tcpwrappers \ - --sysconfdir=/etc \ - --with-dbdir=/var/lib/clamav") - pisitools.dosed("libtool", " -shared ", " -Wl,-O1,--as-needed -shared ") + cmaketools.configure(j) def build(): - autotools.make() + shelltools.system("ninja -C _build") + +def check(): + #pass + shelltools.system("ninja -C _build test") def install(): - autotools.rawInstall("DESTDIR=%s" % get.installDIR()) + shelltools.system("DESTDIR=%s ninja -C _build install" % get.installDIR()) #pisitools.dodir("/run/clamav") - #pisitools.dodir("/var/lib/clamav") + pisitools.dodir("/var/lib/clamav") #pisitools.dodir("/var/log/clamav") - #shelltools.touch(get.installDIR() + "/var/log/clamav/freshclam.log") - #shelltools.chmod(get.installDIR() + "/var/log/clamav/freshclam.log", 0600) - #shelltools.chown("%s/var/log/clamav/freshclam.log" % get.installDIR(), "clamav", "clamav") - pisitools.dodoc("COPYING*", "NEWS*", "README*") + shelltools.system("find %s/etc/clamav -type f | sed -e 'p;s:.sample::' | xargs -n2 mv" % get.installDIR()) diff --git a/util/antivirus/clamav/comar/package.py b/util/antivirus/clamav/comar/package.py index 991eb3b235..266f6199ac 100644 --- a/util/antivirus/clamav/comar/package.py +++ b/util/antivirus/clamav/comar/package.py @@ -4,5 +4,5 @@ import os def postInstall(fromVersion, fromRelease, toVersion, toRelease): os.system("/bin/chown clamav:clamav /var/lib/clamav -R") - os.system("/bin/chown clamav:clamav /run/clamav -R") - os.system("/bin/chown clamav:clamav /var/log/clamav -R") + #os.system("/bin/chown clamav:clamav /run/clamav -R") + #os.system("/bin/chown clamav:clamav /var/log/clamav -R") diff --git a/util/antivirus/clamav/comar/service.py b/util/antivirus/clamav/comar/service.py index 74467b7cf6..41df8371d1 100644 --- a/util/antivirus/clamav/comar/service.py +++ b/util/antivirus/clamav/comar/service.py @@ -1,4 +1,5 @@ # -*- coding: utf-8 -*- + import os from comar.service import * @@ -8,19 +9,16 @@ serviceDesc = _({"en": "Clam Anti-Virus Daemon", @synchronized def start(): - #if config.get("DAZUKO_SUPPORT", "no") == "yes": - # call("System.Service.start", "dazuko") - startService(command="/usr/sbin/clamd", - chuid="clamav", - pidfile="/run/clamav/clamd.pid", - donotify=False) + #chuid="clamav", + pidfile="/run/clamd.pid", + donotify=False) time.sleep(3) startService(command="/usr/bin/freshclam", - args="-d -p /run/clamav/freshclam.pid", - chuid="clamav", - pidfile="/run/clamav/freshclam.pid", - donotify=True) + args="-d -p /run/freshclam.pid", + #chuid="clamav", + pidfile="/run/freshclam.pid", + donotify=True) @synchronized def stop(): @@ -29,8 +27,6 @@ def stop(): time.sleep(4) stopService(command="/usr/bin/freshclam", donotify=True) - #if config.get("DAZUKO_SUPPORT", "no") == "yes": - # call("System.Service.stop", "dazuko") def status(): - return isServiceRunning("/run/clamav/clamd.pid") and isServiceRunning("/run/clamav/freshclam.pid") + return isServiceRunning("/run/clamd.pid") and isServiceRunning("/run/freshclam.pid") diff --git a/util/antivirus/clamav/files/clamav-milter.conf b/util/antivirus/clamav/files/clamav-milter.conf deleted file mode 100644 index cf74810e57..0000000000 --- a/util/antivirus/clamav/files/clamav-milter.conf +++ /dev/null @@ -1,267 +0,0 @@ -## -## Example config file for clamav-milter -## - -# Comment or remove the line below. -# Example - - -## -## Main options -## - -# Define the interface through which we communicate with sendmail -# This option is mandatory! Possible formats are: -# [[unix|local]:]/path/to/file - to specify a unix domain socket -# inet:port@[hostname|ip-address] - to specify an ipv4 socket -# inet6:port@[hostname|ip-address] - to specify an ipv6 socket -# -# Default: no default -MilterSocket /run/clamav/clamav-milter.sock -#MilterSocket inet:7357 - -# Define the group ownership for the (unix) milter socket. -# Default: disabled (the primary group of the user running clamd) -#MilterSocketGroup virusgroup - -# Sets the permissions on the (unix) milter socket to the specified mode. -# Default: disabled (obey umask) -#MilterSocketMode 660 - -# Remove stale socket after unclean shutdown. -# -# Default: yes -#FixStaleSocket yes - -# Run as another user (clamav-milter must be started by root for this option to work) -# -# Default: unset (don't drop privileges) -User clamav - -# Initialize supplementary group access (clamav-milter must be started by root). -# -# Default: no -#AllowSupplementaryGroups no - -# Waiting for data from clamd will timeout after this time (seconds). -# Value of 0 disables the timeout. -# -# Default: 120 -#ReadTimeout 300 - -# Don't fork into background. -# -# Default: no -#Foreground yes - -# Chroot to the specified directory. -# Chrooting is performed just after reading the config file and before dropping privileges. -# -# Default: unset (don't chroot) -#Chroot /newroot - -# This option allows you to save a process identifier of the listening -# daemon (main thread). -# -# Default: disabled -PidFile /run/clamav/clamav-milter.pid - -# Optional path to the global temporary directory. -# Default: system specific (usually /tmp or /var/tmp). -# -#TemporaryDirectory /var/tmp - -## -## Clamd options -## - -# Define the clamd socket to connect to for scanning. -# This option is mandatory! Syntax: -# ClamdSocket unix:path -# ClamdSocket tcp:host:port -# The first syntax specifies a local unix socket (needs an absolute path) e.g.: -ClamdSocket unix:/run/clamav/clamd.socket -# The second syntax specifies a tcp local or remote tcp socket: the -# host can be a hostname or an ip address; the ":port" field is only required -# for IPv6 addresses, otherwise it defaults to 3310, e.g.: -# ClamdSocket tcp:192.168.0.1 -# -# This option can be repeated several times with different sockets or even -# with the same socket: clamd servers will be selected in a round-robin fashion. -# -# Default: no default -#ClamdSocket tcp:scanner.mydomain:7357 - - -## -## Exclusions -## - -# Messages originating from these hosts/networks will not be scanned -# This option takes a host(name)/mask pair in CIRD notation and can be -# repeated several times. If "/mask" is omitted, a host is assumed. -# To specify a locally orignated, non-smtp, email use the keyword "local" -# -# Default: unset (scan everything regardless of the origin) -#LocalNet local -#LocalNet 192.168.0.0/24 -#LocalNet 1111:2222:3333::/48 - -# This option specifies a file which contains a list of basic POSIX regular -# expressions. Addresses (sent to or from - see below) matching these regexes -# will not be scanned. Optionally each line can start with the string "From:" -# or "To:" (note: no whitespace after the colon) indicating if it is, -# respectively, the sender or recipient that is to be whitelisted. -# If the field is missing, "To:" is assumed. -# Lines starting with #, : or ! are ignored. -# -# Default unset (no exclusion applied) -#Whitelist /etc/whitelisted_addresses - -# Messages from authenticated SMTP users matching this extended POSIX -# regular expression (egrep-like) will not be scanned. -# As an alternative, a file containing a plain (not regex) list of names (one -# per line) can be specified using the prefix "file:". -# e.g. SkipAuthenticated file:/etc/good_guys -# -# Note: this is the AUTH login name! -# -# Default: unset (no whitelisting based on SMTP auth) -#SkipAuthenticated ^(tom|dick|henry)$ - -# Messages larger than this value won't be scanned. -# Make sure this value is lower or equal than StreamMaxLength in clamd.conf -# -# Default: 25M -#MaxFileSize 10M - - -## -## Actions -## - -# The following group of options controls the delievery process under -# different circumstances. -# The following actions are available: -# - Accept -# The message is accepted for delievery -# - Reject -# Immediately refuse delievery (a 5xx error is returned to the peer) -# - Defer -# Return a temporary failure message (4xx) to the peer -# - Blackhole (not available for OnFail) -# Like Accept but the message is sent to oblivion -# - Quarantine (not available for OnFail) -# Like Accept but message is quarantined instead of being delivered -# -# NOTE: In Sendmail the quarantine queue can be examined via mailq -qQ -# For Postfix this causes the message to be placed on hold -# -# Action to be performed on clean messages (mostly useful for testing) -# Default: Accept -#OnClean Accept - -# Action to be performed on infected messages -# Default: Quarantine -#OnInfected Quarantine - -# Action to be performed on error conditions (this includes failure to -# allocate data structures, no scanners available, network timeouts, -# unknown scanner replies and the like) -# Default: Defer -#OnFail Defer - -# This option allows to set a specific rejection reason for infected messages -# and it's therefore only useful together with "OnInfected Reject" -# The string "%v", if present, will be replaced with the virus name. -# Default: MTA specific -#RejectMsg - -# If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an -# "X-Virus-Status" headers will be attached to each processed message, possibly -# replacing existing headers. -# If it is set to Add, the X-Virus headers are added possibly on top of the -# existing ones. -# Note that while "Replace" can potentially break DKIM signatures, "Add" may -# confuse procmail and similar filters. -# Default: no -#AddHeader Replace - -# When AddHeader is in use, this option allows to arbitrary set the reported -# hostname. This may be desirable in order to avoid leaking internal names. -# If unset the real machine name is used. -# Default: disabled -#ReportHostname my.mail.server.name - -# Execute a command (possibly searching PATH) when an infected message is found. -# The following parameters are passed to the invoked program in this order: -# virus name, queue id, sender, destination, subject, message id, message date. -# Note #1: this requires MTA macroes to be available (see LogInfected below) -# Note #2: the process is invoked in the context of clamav-milter -# Note #3: clamav-milter will wait for the process to exit. Be quick or fork to -# avoid unnecessary delays in email delievery -# Default: disabled -#VirusAction /usr/local/bin/my_infected_message_handler - -## -## Logging options -## - -# Uncomment this option to enable logging. -# LogFile must be writable for the user running daemon. -# A full path is required. -# -# Default: disabled -LogFile /var/log/clamav/clamav-milter.log - -# By default the log file is locked for writing - the lock protects against -# running clamav-milter multiple times. -# This option disables log file locking. -# -# Default: no -#LogFileUnlock yes - -# Maximum size of the log file. -# Value of 0 disables the limit. -# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes) -# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the size -# in bytes just don't use modifiers. -# -# Default: 1M -#LogFileMaxSize 2M - -# Log time with each message. -# -# Default: no -#LogTime yes - -# Use system logger (can work together with LogFile). -# -# Default: no -#LogSyslog yes - -# Specify the type of syslog messages - please refer to 'man syslog' -# for facility names. -# -# Default: LOG_LOCAL6 -#LogFacility LOG_MAIL - -# Enable verbose logging. -# -# Default: no -#LogVerbose yes - -# This option allows to tune what is logged when a message is infected. -# Possible values are Off (the default - nothing is logged), -# Basic (minimal info logged), Full (verbose info logged) -# Note: -# For this to work properly in sendmail, make sure the msg_id, mail_addr, -# rcpt_addr and i macroes are available in eom. In other words add a line like: -# Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i -# to your .cf file. Alternatively use the macro: -# define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i') -# Postfix should be working fine with the default settings. -# -# Default: disabled -#LogInfected Basic - diff --git a/util/antivirus/clamav/files/clamav.conf b/util/antivirus/clamav/files/clamav.conf deleted file mode 100644 index 22d29941ea..0000000000 --- a/util/antivirus/clamav/files/clamav.conf +++ /dev/null @@ -1 +0,0 @@ -d /run/clamav 0755 clamav clamav diff --git a/util/antivirus/clamav/files/clamd.conf b/util/antivirus/clamav/files/clamd.conf deleted file mode 100644 index 6d7542fc7e..0000000000 --- a/util/antivirus/clamav/files/clamd.conf +++ /dev/null @@ -1,479 +0,0 @@ -## -## Example config file for the Clam AV daemon -## Please read the clamd.conf(5) manual before editing this file. -## - - -# Comment or remove the line below. -# Example - -# Uncomment this option to enable logging. -# LogFile must be writable for the user running daemon. -# A full path is required. -# Default: disabled -LogFile /var/log/clamav/clamd.log - -# By default the log file is locked for writing - the lock protects against -# running clamd multiple times (if want to run another clamd, please -# copy the configuration file, change the LogFile variable, and run -# the daemon with --config-file option). -# This option disables log file locking. -# Default: no -#LogFileUnlock yes - -# Maximum size of the log file. -# Value of 0 disables the limit. -# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes) -# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the size -# in bytes just don't use modifiers. -# Default: 1M -#LogFileMaxSize 2M - -# Log time with each message. -# Default: no -LogTime yes - -# Also log clean files. Useful in debugging but drastically increases the -# log size. -# Default: no -#LogClean yes - -# Use system logger (can work together with LogFile). -# Default: no -LogSyslog yes - -# Specify the type of syslog messages - please refer to 'man syslog' -# for facility names. -# Default: LOG_LOCAL6 -#LogFacility LOG_MAIL - -# Enable verbose logging. -# Default: no -#LogVerbose yes - -# Provide additional information about the infected file, such as its -# size and hash, together with the virus name. It's recommended to enable -# this option along with SubmitDetectionStats in freshclam.conf. -#ExtendedDetectionInfo yes - -# This option allows you to save a process identifier of the listening -# daemon (main thread). -# Default: disabled -PidFile /run/clamav/clamd.pid - -# Optional path to the global temporary directory. -# Default: system specific (usually /tmp or /var/tmp). -TemporaryDirectory /var/tmp - -# Path to the database directory. -# Default: hardcoded (depends on installation options) -#DatabaseDirectory /var/lib/clamav - -# Only load the official signatures published by the ClamAV project. -# Default: no -#OfficialDatabaseOnly no - -# The daemon can work in local mode, network mode or both. -# Due to security reasons we recommend the local mode. - -# Path to a local socket file the daemon will listen on. -# Default: disabled (must be specified by a user) -LocalSocket /run/clamav/clamd.sock - -# Sets the group ownership on the unix socket. -# Default: disabled (the primary group of the user running clamd) -#LocalSocketGroup virusgroup - -# Sets the permissions on the unix socket to the specified mode. -# Default: disabled (socket is world accessible) -#LocalSocketMode 660 - -# Remove stale socket after unclean shutdown. -# Default: yes -#FixStaleSocket yes - -# TCP port address. -# Default: no -#TCPSocket 3310 - -# TCP address. -# By default we bind to INADDR_ANY, probably not wise. -# Enable the following to provide some degree of protection -# from the outside world. -# Default: no -#TCPAddr 127.0.0.1 - -# Maximum length the queue of pending connections may grow to. -# Default: 15 -#MaxConnectionQueueLength 30 - -# Clamd uses FTP-like protocol to receive data from remote clients. -# If you are using clamav-milter to balance load between remote clamd daemons -# on firewall servers you may need to tune the options below. - -# Close the connection when the data size limit is exceeded. -# The value should match your MTA's limit for a maximum attachment size. -# Default: 25M -#StreamMaxLength 10M - -# Limit port range. -# Default: 1024 -#StreamMinPort 30000 -# Default: 2048 -#StreamMaxPort 32000 - -# Maximum number of threads running at the same time. -# Default: 10 -#MaxThreads 20 - -# Waiting for data from a client socket will timeout after this time (seconds). -# Value of 0 disables the timeout. -# Default: 120 -#ReadTimeout 300 - -# This option specifies the time (in seconds) after which clamd should -# timeout if a client doesn't provide any initial command after connecting. -# Default: 5 -#CommandReadTimeout 5 - -# This option specifies how long to wait (in miliseconds) if the send buffer is full. -# Keep this value low to prevent clamd hanging -# -# Default: 500 -#SendBufTimeout 200 - -# Maximum number of queued items (including those being processed by MaxThreads threads) -# It is recommended to have this value at least twice MaxThreads if possible. -# WARNING: you shouldn't increase this too much to avoid running out of file descriptors, -# the following condition should hold: -# MaxThreads*MaxRecursion + (MaxQueue - MaxThreads) + 6< RLIMIT_NOFILE (usual max is 1024) -# -# Default: 100 -#MaxQueue 200 - -# Waiting for a new job will timeout after this time (seconds). -# Default: 30 -#IdleTimeout 60 - -# Don't scan files and directories matching regex -# This directive can be used multiple times -# Default: scan all -#ExcludePath ^/proc/ -#ExcludePath ^/sys/ - -# Maximum depth directories are scanned at. -# Default: 15 -#MaxDirectoryRecursion 20 - -# Follow directory symlinks. -# Default: no -#FollowDirectorySymlinks yes - -# Follow regular file symlinks. -# Default: no -#FollowFileSymlinks yes - -# Scan files and directories on other filesystems. -# Default: yes -#CrossFilesystems yes - -# Perform a database check. -# Default: 600 (10 min) -#SelfCheck 600 - -# Execute a command when virus is found. In the command string %v will -# be replaced with the virus name. -# Default: no -#VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v" - -# Run as another user (clamd must be started by root for this option to work) -# Default: don't drop privileges -User clamav - -# Initialize supplementary group access (clamd must be started by root). -# Default: no -#AllowSupplementaryGroups no - -# Stop daemon when libclamav reports out of memory condition. -#ExitOnOOM yes - -# Don't fork into background. -# Default: no -#Foreground yes - -# Enable debug messages in libclamav. -# Default: no -#Debug yes - -# Do not remove temporary files (for debug purposes). -# Default: no -#LeaveTemporaryFiles yes - -# Detect Possibly Unwanted Applications. -# Default: no -#DetectPUA yes - -# Exclude a specific PUA category. This directive can be used multiple times. -# See http://www.clamav.net/support/pua for the complete list of PUA -# categories. -# Default: Load all categories (if DetectPUA is activated) -#ExcludePUA NetTool -#ExcludePUA PWTool - -# Only include a specific PUA category. This directive can be used multiple -# times. -# Default: Load all categories (if DetectPUA is activated) -#IncludePUA Spy -#IncludePUA Scanner -#IncludePUA RAT - -# In some cases (eg. complex malware, exploits in graphic files, and others), -# ClamAV uses special algorithms to provide accurate detection. This option -# controls the algorithmic detection. -# Default: yes -#AlgorithmicDetection yes - - -## -## Executable files -## - -# PE stands for Portable Executable - it's an executable file format used -# in all 32 and 64-bit versions of Windows operating systems. This option allows -# ClamAV to perform a deeper analysis of executable files and it's also -# required for decompression of popular executable packers such as UPX, FSG, -# and Petite. -# Default: yes -#ScanPE yes - -# Executable and Linking Format is a standard format for UN*X executables. -# This option allows you to control the scanning of ELF files. -# Default: yes -#ScanELF yes - -# With this option clamav will try to detect broken executables (both PE and -# ELF) and mark them as Broken.Executable. -# Default: no -#DetectBrokenExecutables yes - - -## -## Documents -## - -# This option enables scanning of OLE2 files, such as Microsoft Office -# documents and .msi files. -# Default: yes -#ScanOLE2 yes - -# This option enables scanning within PDF files. -# Default: yes -ScanPDF yes - - -## -## Mail files -## - -# Enable internal e-mail scanner. -# Default: yes -#ScanMail yes - -# Scan RFC1341 messages split over many emails. -# You will need to periodically clean up $TemporaryDirectory/clamav-partial directory. -# WARNING: This option may open your system to a DoS attack. -# Never use it on loaded servers. -# Default: no -#ScanPartialMessages yes - - -# With this option enabled ClamAV will try to detect phishing attempts by using -# signatures. -# Default: yes -#PhishingSignatures yes - -# Scan URLs found in mails for phishing attempts using heuristics. -# Default: yes -#PhishingScanURLs yes - -# Always block SSL mismatches in URLs, even if the URL isn't in the database. -# This can lead to false positives. -# -# Default: no -#PhishingAlwaysBlockSSLMismatch no - -# Always block cloaked URLs, even if URL isn't in database. -# This can lead to false positives. -# -# Default: no -#PhishingAlwaysBlockCloak no - -# Allow heuristic match to take precedence. -# When enabled, if a heuristic scan (such as phishingScan) detects -# a possible virus/phish it will stop scan immediately. Recommended, saves CPU -# scan-time. -# When disabled, virus/phish detected by heuristic scans will be reported only at -# the end of a scan. If an archive contains both a heuristically detected -# virus/phish, and a real malware, the real malware will be reported -# -# Keep this disabled if you intend to handle "*.Heuristics.*" viruses -# differently from "real" malware. -# If a non-heuristically-detected virus (signature-based) is found first, -# the scan is interrupted immediately, regardless of this config option. -# -# Default: no -#HeuristicScanPrecedence yes - -## -## Data Loss Prevention (DLP) -## - -# Enable the DLP module -# Default: No -#StructuredDataDetection yes - -# This option sets the lowest number of Credit Card numbers found in a file -# to generate a detect. -# Default: 3 -#StructuredMinCreditCardCount 5 - -# This option sets the lowest number of Social Security Numbers found -# in a file to generate a detect. -# Default: 3 -#StructuredMinSSNCount 5 - -# With this option enabled the DLP module will search for valid -# SSNs formatted as xxx-yy-zzzz -# Default: yes -#StructuredSSNFormatNormal yes - -# With this option enabled the DLP module will search for valid -# SSNs formatted as xxxyyzzzz -# Default: no -#StructuredSSNFormatStripped yes - - -## -## HTML -## - -# Perform HTML normalisation and decryption of MS Script Encoder code. -# Default: yes -#ScanHTML yes - - -## -## Archives -## - -# ClamAV can scan within archives and compressed files. -# Default: yes -#ScanArchive yes - -# Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR). -# Default: no -#ArchiveBlockEncrypted no - - -## -## Limits -## - -# The options below protect your system against Denial of Service attacks -# using archive bombs. - -# This option sets the maximum amount of data to be scanned for each input file. -# Archives and other containers are recursively extracted and scanned up to this -# value. -# Value of 0 disables the limit -# Note: disabling this limit or setting it too high may result in severe damage -# to the system. -# Default: 100M -#MaxScanSize 150M - -# Files larger than this limit won't be scanned. Affects the input file itself -# as well as files contained inside it (when the input file is an archive, a -# document or some other kind of container). -# Value of 0 disables the limit. -# Note: disabling this limit or setting it too high may result in severe damage -# to the system. -# Default: 25M -#MaxFileSize 30M - -# Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR -# file, all files within it will also be scanned. This options specifies how -# deeply the process should be continued. -# Note: setting this limit too high may result in severe damage to the system. -# Default: 16 -#MaxRecursion 10 - -# Number of files to be scanned within an archive, a document, or any other -# container file. -# Value of 0 disables the limit. -# Note: disabling this limit or setting it too high may result in severe damage -# to the system. -# Default: 10000 -#MaxFiles 15000 - - -## -## Clamuko settings -## - -# Enable Clamuko. Dazuko must be configured and running. Clamuko supports -# both Dazuko (/dev/dazuko) and DazukoFS (/dev/dazukofs.ctrl). DazukoFS -# is the preferred option. For more information please visit www.dazuko.org -# Default: no -#ClamukoScanOnAccess yes - -# The number of scanner threads that will be started (DazukoFS only). -# Having multiple scanner threads allows Clamuko to serve multiple -# processes simultaneously. This is particularly beneficial on SMP machines. -# Default: 3 -#ClamukoScannerCount 3 - -# Don't scan files larger than ClamukoMaxFileSize -# Value of 0 disables the limit. -# Default: 5M -#ClamukoMaxFileSize 10M - -# Set access mask for Clamuko (Dazuko only). -# Default: no -#ClamukoScanOnOpen yes -#ClamukoScanOnClose yes -#ClamukoScanOnExec yes - -# Set the include paths (all files inside them will be scanned). You can have -# multiple ClamukoIncludePath directives but each directory must be added -# in a seperate line. (Dazuko only) -# Default: disabled -#ClamukoIncludePath /home -#ClamukoIncludePath /students - -# Set the exclude paths. All subdirectories are also excluded. (Dazuko only) -# Default: disabled -#ClamukoExcludePath /home/bofh - -# With this option enabled ClamAV will load bytecode from the database. -# It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses. -# Default: yes -#Bytecode yes - -# Set bytecode security level. -# Possible values: -# None - no security at all, meant for debugging. DO NOT USE THIS ON PRODUCTION SYSTEMS -# This value is only available if clamav was built with --enable-debug! -# TrustSigned - trust bytecode loaded from signed .c[lv]d files, -# insert runtime safety checks for bytecode loaded from other sources -# Paranoid - don't trust any bytecode, insert runtime checks for all -# Recommended: TrustSigned, because bytecode in .cvd files already has these checks -# Note that by default only signed bytecode is loaded, currently you can only -# load unsigned bytecode in --enable-debug mode. -# -# Default: TrustSigned -#BytecodeSecurity TrustSigned - -# Set bytecode timeout in miliseconds. -# -# Default: 60000 -# BytecodeTimeout 60000 diff --git a/util/antivirus/clamav/files/daemon_confs.patch b/util/antivirus/clamav/files/daemon_confs.patch new file mode 100644 index 0000000000..dabafc8150 --- /dev/null +++ b/util/antivirus/clamav/files/daemon_confs.patch @@ -0,0 +1,106 @@ +diff --git a/etc/clamav-milter.conf.sample b/etc/clamav-milter.conf.sample +index 7ca0e6e..98af596 100644 +--- a/etc/clamav-milter.conf.sample ++++ b/etc/clamav-milter.conf.sample +@@ -3,7 +3,7 @@ + ## + + # Comment or remove the line below. +-Example ++#Example + + + ## +diff --git a/etc/clamd.conf.sample b/etc/clamd.conf.sample +index 2f18866..2c63980 100644 +--- a/etc/clamd.conf.sample ++++ b/etc/clamd.conf.sample +@@ -5,13 +5,13 @@ + + + # Comment or remove the line below. +-Example ++#Example + + # Uncomment this option to enable logging. + # LogFile must be writable for the user running daemon. + # A full path is required. + # Default: disabled +-#LogFile /tmp/clamd.log ++LogFile /var/log/clamd.log + + # By default the log file is locked for writing - the lock protects against + # running clamd multiple times (if want to run another clamd, please +@@ -19,7 +19,7 @@ Example + # the daemon with --config-file option). + # This option disables log file locking. + # Default: no +-#LogFileUnlock yes ++LogFileUnlock yes + + # Maximum size of the log file. + # Value of 0 disables the limit. +@@ -74,7 +74,7 @@ Example + # It is recommended that the directory where this file is stored is + # also owned by root to keep other users from tampering with it. + # Default: disabled +-#PidFile /var/run/clamd.pid ++PidFile /run/clamd.pid + + # Optional path to the global temporary directory. + # Default: system specific (usually /tmp or /var/tmp). +@@ -82,7 +82,7 @@ Example + + # Path to the database directory. + # Default: hardcoded (depends on installation options) +-#DatabaseDirectory /var/lib/clamav ++DatabaseDirectory /var/lib/clamav + + # Only load the official signatures published by the ClamAV project. + # Default: no +@@ -109,7 +109,7 @@ Example + + # TCP port address. + # Default: no +-#TCPSocket 3310 ++TCPSocket 3310 + + # TCP address. + # By default we bind to INADDR_ANY, probably not wise. +@@ -117,7 +117,7 @@ Example + # from the outside world. This option can be specified multiple + # times if you want to listen on multiple IPs. IPv6 is now supported. + # Default: no +-#TCPAddr localhost ++TCPAddr localhost + + # Maximum length the queue of pending connections may grow to. + # Default: 200 +diff --git a/etc/freshclam.conf.sample b/etc/freshclam.conf.sample +index 26c4e7a..5f791e8 100644 +--- a/etc/freshclam.conf.sample ++++ b/etc/freshclam.conf.sample +@@ -5,12 +5,12 @@ + + + # Comment or remove the line below. +-Example ++#Example + + # Path to the database directory. + # WARNING: It must match clamd.conf's directive! + # Default: hardcoded (depends on installation options) +-#DatabaseDirectory /var/lib/clamav ++DatabaseDirectory /var/lib/clamav + + # Path to the log file (make sure it has proper permissions) + # Default: disabled +@@ -51,7 +51,7 @@ Example + # It is recommended that the directory where this file is stored is + # also owned by root to keep other users from tampering with it. + # Default: disabled +-#PidFile /var/run/freshclam.pid ++PidFile /run/freshclam.pid + + # By default when started freshclam drops privileges and switches to the + # "clamav" user. This directive allows you to change the database owner. diff --git a/util/antivirus/clamav/files/freshclam.conf b/util/antivirus/clamav/files/freshclam.conf deleted file mode 100644 index fea1abaa24..0000000000 --- a/util/antivirus/clamav/files/freshclam.conf +++ /dev/null @@ -1,202 +0,0 @@ -## -## Example config file for freshclam -## Please read the freshclam.conf(5) manual before editing this file. -## - - -# Comment or remove the line below. -# Example - -# Path to the database directory. -# WARNING: It must match clamd.conf's directive! -# Default: hardcoded (depends on installation options) -#DatabaseDirectory /var/lib/clamav - -# Path to the log file (make sure it has proper permissions) -# Default: disabled -UpdateLogFile /var/log/clamav/freshclam.log - -# Maximum size of the log file. -# Value of 0 disables the limit. -# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes) -# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). -# in bytes just don't use modifiers. -# Default: 1M -#LogFileMaxSize 2M - -# Log time with each message. -# Default: no -LogTime yes - -# Enable verbose logging. -# Default: no -#LogVerbose yes - -# Use system logger (can work together with UpdateLogFile). -# Default: no -LogSyslog yes - -# Specify the type of syslog messages - please refer to 'man syslog' -# for facility names. -# Default: LOG_LOCAL6 -#LogFacility LOG_MAIL - -# This option allows you to save the process identifier of the daemon -# Default: disabled -PidFile /run/clamav/freshclam.pid - -# By default when started freshclam drops privileges and switches to the -# "clamav" user. This directive allows you to change the database owner. -# Default: clamav (may depend on installation options) -#DatabaseOwner clamav - -# Initialize supplementary group access (freshclam must be started by root). -# Default: no -#AllowSupplementaryGroups yes - -# Use DNS to verify virus database version. Freshclam uses DNS TXT records -# to verify database and software versions. With this directive you can change -# the database verification domain. -# WARNING: Do not touch it unless you're configuring freshclam to use your -# own database verification domain. -# Default: current.cvd.clamav.net -#DNSDatabaseInfo current.cvd.clamav.net - -# Uncomment the following line and replace XY with your country -# code. See http://www.iana.org/cctld/cctld-whois.htm for the full list. -#DatabaseMirror db.XY.clamav.net - -# database.clamav.net is a round-robin record which points to our most -# reliable mirrors. It's used as a fall back in case db.XY.clamav.net is -# not working. DO NOT TOUCH the following line unless you know what you -# are doing. -DatabaseMirror database.clamav.net - -# How many attempts to make before giving up. -# Default: 3 (per mirror) -#MaxAttempts 5 - -# With this option you can control scripted updates. It's highly recommended -# to keep it enabled. -# Default: yes -#ScriptedUpdates yes - -# By default freshclam will keep the local databases (.cld) uncompressed to -# make their handling faster. With this option you can enable the compression; -# the change will take effect with the next database update. -# Default: no -#CompressLocalDatabase no - -# Number of database checks per day. -# Default: 12 (every two hours) -#Checks 24 - -# Proxy settings -# Default: disabled -#HTTPProxyServer myproxy.com -#HTTPProxyPort 1234 -#HTTPProxyUsername myusername -#HTTPProxyPassword mypass - -# If your servers are behind a firewall/proxy which applies User-Agent -# filtering you can use this option to force the use of a different -# User-Agent header. -# Default: clamav/version_number -#HTTPUserAgent SomeUserAgentIdString - -# Use aaa.bbb.ccc.ddd as client address for downloading databases. Useful for -# multi-homed systems. -# Default: Use OS'es default outgoing IP address. -#LocalIPAddress aaa.bbb.ccc.ddd - -# Send the RELOAD command to clamd. -# Default: no -NotifyClamd /etc/clamd.conf - -# Run command after successful database update. -# Default: disabled -#OnUpdateExecute command - -# Run command when database update process fails. -# Default: disabled -#OnErrorExecute command - -# Run command when freshclam reports outdated version. -# In the command string %v will be replaced by the new version number. -# Default: disabled -#OnOutdatedExecute command - -# Don't fork into background. -# Default: no -#Foreground yes - -# Enable debug messages in libclamav. -# Default: no -#Debug yes - -# Timeout in seconds when connecting to database server. -# Default: 30 -#ConnectTimeout 60 - -# Timeout in seconds when reading from database server. -# Default: 30 -#ReceiveTimeout 60 - -# With this option enabled, freshclam will attempt to load new -# databases into memory to make sure they are properly handled -# by libclamav before replacing the old ones. -# Default: yes -#TestDatabases yes - -# When enabled freshclam will submit statistics to the ClamAV Project about -# the latest virus detections in your environment. The ClamAV maintainers -# will then use this data to determine what types of malware are the most -# detected in the field and in what geographic area they are. -# This feature requires LogTime and LogFile to be enabled in clamd.conf, -# it's also recommended to turn on ExtendedDetectionInfo. -# Default: no -#SubmitDetectionStats /path/to/clamd.conf - -# Country of origin of malware/detection statistics (for statistical -# purposes only). The statistics collector at ClamAV.net will look up -# your IP address to determine the geographical origin of the malware -# reported by your installation. If this installation is mainly used to -# scan data which comes from a different location, please enable this -# option and enter a two-letter code (see http://www.iana.org/domains/root/db/) -# of the country of origin. -# Default: disabled -#DetectionStatsCountry country-code - -# This option enables support for our "Personal Statistics" service. -# When this option is enabled, the information on malware detected by -# your clamd installation is made available to you through our website. -# To get your HostID, log on http://www.stats.clamav.net and add a new -# host to your host list. Once you have the HostID, uncomment this option -# and paste the HostID here. As soon as your freshclam starts submitting -# information to our stats collecting service, you will be able to view -# the statistics of this clamd installation by logging into -# http://www.stats.clamav.net with the same credentials you used to -# generate the HostID. For more information refer to: -# http://www.clamav.net/support/faq/faq-cctts/ -# This feature requires SubmitDetectionStats to be enabled. -# Default: disabled -#DetectionStatsHostID unique-id - -# This option enables support for Google Safe Browsing. When activated for -# the first time, freshclam will download a new database file (safebrowsing.cvd) -# which will be automatically loaded by clamd and clamscan during the next -# reload, provided that the heuristic phishing detection is turned on. This -# database includes information about websites that may be phishing sites or -# possible sources of malware. When using this option, it's mandatory to run -# freshclam at least every 30 minutes. -# Freshclam uses the ClamAV's mirror infrastructure to distribute the -# database and its updates but all the contents are provided under Google's -# terms of use. See http://code.google.com/support/bin/answer.py?answer=70015 -# and http://safebrowsing.clamav.net for more information. -# Default: disabled -#SafeBrowsing yes - -# This option enables downloading of bytecode.cvd, which includes additional -# detection mechanisms and improvements to the ClamAV engine. -# Default: enabled -#Bytecode yes diff --git a/util/antivirus/clamav/pspec.xml b/util/antivirus/clamav/pspec.xml index 472807a82c..d08feba0c6 100644 --- a/util/antivirus/clamav/pspec.xml +++ b/util/antivirus/clamav/pspec.xml @@ -1,65 +1,67 @@ - + clamav - http://www.clamav.net + https://www.clamav.net/ PisiLinux Community admins@pisilinux.org - GPLv2+ - service - library + GPL-2 app:console - Clam Antivirus software + Clam Antivirus software. Clam AntiVirus is a GPL anti-virus toolkit for UNIX. - https://www.clamav.net/downloads/production/clamav-0.103.0.tar.gz + + https://www.clamav.net/downloads/production/clamav-0.105.1.tar.gz + - libxml2-devel - libpcre2-devel + rust + cmake + ninja + curl-devel zlib-devel + check-devel json-c-devel - ncurses-devel openssl-devel + ncurses-devel + python3-devel + libxml2-devel + libpcre2-devel + daemon_confs.patch clamav - libxml2 - bzip2 - libgcc - libtool-ltdl - libpcre2 curl zlib + bzip2 json-c + libgcc + libxml2 ncurses openssl + libpcre2 + /usr/bin /usr/sbin - /etc - /usr/lib/tmpfiles.d/clamav.conf + /etc/clamav /usr/lib - /lib/udev/rules.d - /var/lib/clamav /run/clamav - /var/log + /var/lib/clamav + /var/log/clamav /usr/share/doc /usr/share/man - clamav.conf - clamd.conf - freshclam.conf - clamav-milter.conf + System.Package @@ -69,8 +71,6 @@ clamav-devel - library - Development headers for Clamav clamav @@ -81,6 +81,13 @@ + + 2022-21-15 + 0.105.1 + Version bump. + fury + uglyside@yandex.ru + 2021-01-31 0.103.0