Re: Bug#1037250: ITP: fangfrisch -- Update and verify unofficial Clam Anti-Virus signatures

2023-06-10 Thread Paul Wise
On Sat, 2023-06-10 at 09:50 -0400, Scott Kitterman wrote:

> It does, but I think Fangfrisch is still a useful thing to have in Debian.

I wonder if there is any tool that generates and/or contains the
appropriate ClamAV configs for popular unofficial signatures,
rather than manually downloading those signatures themselves.

Perhaps Fangfrisch should become such a tool?

Or is ClamAV upstream interested in such a tool/config?

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


signature.asc
Description: This is a digitally signed message part


Re: Bug#1037250: ITP: fangfrisch -- Update and verify unofficial Clam Anti-Virus signatures

2023-06-10 Thread Scott Kitterman
On Saturday, June 10, 2023 2:49:29 AM EDT Paul Wise wrote:
> On Fri, 2023-06-09 at 12:46 +0200, Gürkan Myczko wrote:
> >Description : Update and verify unofficial Clam Anti-Virus
> > signatures This is a sibling of the Clam Anti-Virus freshclam utility. It
> > allows downloading virus definition files that are not official ClamAV
> > canon, e.g. from Sanesecurity, URLhaus and others.
> 
> I was under the impression that ClamAV itself now has options to
> download unofficial signatures, is that the case or was that removed?

It does, but I think Fangfrisch is still a useful thing to have in Debian.

Scott K


signature.asc
Description: This is a digitally signed message part.


Re: Bug#1037250: ITP: fangfrisch -- Update and verify unofficial Clam Anti-Virus signatures

2023-06-10 Thread Paul Wise
On Fri, 2023-06-09 at 12:46 +0200, Gürkan Myczko wrote:

>    Description : Update and verify unofficial Clam Anti-Virus signatures
>   This is a sibling of the Clam Anti-Virus freshclam utility. It allows
>   downloading virus definition files that are not official ClamAV canon,
>   e.g. from Sanesecurity, URLhaus and others.

I was under the impression that ClamAV itself now has options to
download unofficial signatures, is that the case or was that removed?

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


signature.asc
Description: This is a digitally signed message part


Re: Bug#1037250: ITP: fangfrisch -- Update and verify unofficial Clam Anti-Virus signatures

2023-06-09 Thread Scott Kitterman
On Friday, June 9, 2023 6:46:01 AM EDT Gürkan Myczko wrote:
> Package: wnpp
> Severity: wishlist
> Owner: Gürkan Myczko 
> X-Debbugs-Cc: debian-devel@lists.debian.org, maeg...@ee.ethz.ch,
> car...@debian.org
> 
> * Package name: fangfrisch
>Version : 1.6.1
>Upstream Authors: Ralph Seichter
>URL : https://github.com/rseichter/fangfrisch
> * License : GPL-3-or-later
>Description : Update and verify unofficial Clam Anti-Virus
> signatures
>   This is a sibling of the Clam Anti-Virus freshclam utility. It allows
>   downloading virus definition files that are not official ClamAV canon,
>   e.g. from Sanesecurity, URLhaus and others. Fangfrisch was designed
> with
>   security in mind, to be run by an unprivileged user only.

Would you consider maintaining this as part of the clamav team:

https://salsa.debian.org/clamav-team

Fangfrisch has been on my TODO list for some time and I'm glad someone has 
taken it up.  It'd be nice to see it maintained in the same team with clamav.

Scott K

signature.asc
Description: This is a digitally signed message part.