Re: [clamav-users] ClamAV on RHEL9 with FIPS enabled

2022-10-27 Thread Micah Snyder (micasnyd) via clamav-users
We plan to migrate away from MD5, and eventually stop supporting MD5 hash 
signatures as well.  I'm hopeful we can do it in the next feature version.  An 
internal MD5 implementation may be required if we can't fully migrate, but I 
suspect we should be able to.

Regards,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.

From: clamav-users  on behalf of Andrew 
C Aitchison via clamav-users 
Sent: Thursday, October 27, 2022 12:40 AM
To: Orion Poplawski via clamav-users 
Cc: Andrew C Aitchison 
Subject: Re: [clamav-users] ClamAV on RHEL9 with FIPS enabled

On Wed, 26 Oct 2022, Orion Poplawski via clamav-users wrote:

> On 10/24/22 11:03, Hoevenaar, Jeffrey (GE Aerospace, US) via clamav-users
> wrote:
>> Hello,
>>
>> It would appear ClamAV will not run on RHEL9 with FIPS enabled.
>>
>> Has anyone else seen this issue?
>
> Known issue: https://github.com/Cisco-Talos/clamav/issues/564
>
> which it seems you have already found.

I guess that including an internal implementation of md5 would
enable ClamAV to run on FIPS enabled/compliant machines,
but that even so, this would not be the right thing to do ?

--
Andrew C. Aitchison  Kendal, UK
and...@aitchison.me.uk
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


Re: [clamav-users] Does clamav use internet after the many downloading of begun of scan?

2022-10-27 Thread colin course via clamav-users
Not saying you are Dorian 
just explaining a CdC policy on downloading signatures directly 
form the internet 
they dont like it because it incurs extra exspence 
 
i did not make the rules just conveying them too you 
i did not know if this is what you meant but if it was then you 
would seriously get yourself into hot water with the CDC clam provider of 
signatures 

kind regards colin 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


Re: [clamav-users] Txt.Downloader.Generic-6298945-0 FOUND

2022-10-27 Thread colin course via clamav-users
hi wally they say you can get rid of anything in a cache without 
to many problems  or after effects 
one way to stop it comming into the cache making it read only 
but this will stop other files entering as well 
but maybe have a look at the permissions of the cache at least 

now though this is uncomfortable task i must try to get the information out 
,humanity's survivel depends on circulation of information 

take these two words and join them then search on favourite web Engin
32 0r 64 B?? operating system 
shall i throw this rubbish down the rubbish C

kind regards colin 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


Re: [clamav-users] Does clamav use internet after the many downloading of begun of scan?

2022-10-27 Thread colin course via clamav-users
hello Dorian its the fish aka colin 
if you are talking about downloading the signatures directly from the internet 
 then this is strictly forbidden and they will  permanently ban you from using 
clamav downloading signatures 

have you looked into using the graphical front end  for clamav 
not sure if they are affiliated 
its called clamtk i am sure dave the nerd has made one for windows just a 
suggestion 

kind regards the  fish

___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


Re: [clamav-users] i am not a killer psycho but unfornately do you thing some hackers edit both clamd.conf.exemple and freshclam.conf.exemple finally for keep their threat safe ?

2022-10-27 Thread colin course via clamav-users
it would seem that we are all fish in a barrel these day 
i guess we always were but the information was not available
to let us know  it
glad you got it sorted  Dorian :)

kind regards colin 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


Re: [clamav-users] ClamAV on RHEL9 with FIPS enabled

2022-10-27 Thread Andrew C Aitchison via clamav-users

On Wed, 26 Oct 2022, Orion Poplawski via clamav-users wrote:

On 10/24/22 11:03, Hoevenaar, Jeffrey (GE Aerospace, US) via clamav-users 
wrote:

Hello,

It would appear ClamAV will not run on RHEL9 with FIPS enabled.

Has anyone else seen this issue?


Known issue: https://github.com/Cisco-Talos/clamav/issues/564

which it seems you have already found.


I guess that including an internal implementation of md5 would
enable ClamAV to run on FIPS enabled/compliant machines,
but that even so, this would not be the right thing to do ?

--
Andrew C. Aitchison  Kendal, UK
   and...@aitchison.me.uk
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat