Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-23 Thread Ralph Seichter via clamav-users
* Amish via clamav-users: > Did that already few hours back! Great minds... ;-) > I would suggest that your code detect the first run and automatically > run initdb if db_url is sqlite database and file does not exist (but > directory exist) I had thought about this before, but decided against

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-23 Thread Amish via clamav-users
On 23/02/20 6:36 pm, Ralph Seichter via clamav-users wrote: * Amish via clamav-users: That said, I have not disabled support for both, anyone can edit conf file as per their requirement. You are right. Perhaps adding the two additional sections with explicit enabled=false might be an

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-23 Thread Ralph Seichter via clamav-users
* Amish via clamav-users: > I wanted default config file such that package runs out of box. I understand. > That said, I have not disabled support for both, anyone can edit conf > file as per their requirement. You are right. Perhaps adding the two additional sections with explicit

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-22 Thread Amish via clamav-users
On 23/02/20 12:39 am, Ralph Seichter via clamav-users wrote: * Amish via clamav-users: Created AUR package for Arch Linux. (uses systemd timer instead of cron) Nice, thank you. May I ask why you did not enable support for both Malwarepatrol and SecuriteInfo in your packaged configuration?

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-22 Thread Ralph Seichter via clamav-users
* Amish via clamav-users: > Created AUR package for Arch Linux. (uses systemd timer instead of cron) Nice, thank you. May I ask why you did not enable support for both Malwarepatrol and SecuriteInfo in your packaged configuration? I have opened a pull request for Gentoo Linux today, providing

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-22 Thread Amish via clamav-users
On 22/02/20 4:47 pm, Ralph Seichter wrote: * Amish V.: Is it a drop-in replacement (more or less) for clamav-unofficial-sigs? Indeed. I set out to write a replacement, one that is more secure and convenient to configure than clamav-unofficial-sigs, and that is also how I use Fangfrisch on

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-22 Thread Ralph Seichter via clamav-users
* Amish V.: > Is it a drop-in replacement (more or less) for clamav-unofficial-sigs? Indeed. I set out to write a replacement, one that is more secure and convenient to configure than clamav-unofficial-sigs, and that is also how I use Fangfrisch on production servers. -Ralph

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-21 Thread Amish V via clamav-users
> On 18-Feb-2020, at 8:54 PM, Ralph Seichter via clamav-users > wrote: > > After the recent discussion of various security risks posed by the > clamav-unofficial-sigs script, I have written "Fangfrisch" as a secure > and convenient replacement. Is it a drop-in replacement (more or less) for

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-21 Thread Micah Snyder (micasnyd) via clamav-users
I think he responded to the wrong thread. But I may as well answer his question. Pcre is a perl-compatible regex library for C. Pcre2 is the same, but with a new & improved API, with more features, and better stability. On 2/18/20, 5:39 PM, "clamav-users on behalf of Ralph Seichter via

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Ralph Seichter via clamav-users
* Rxx Mxx via clamav-users: > That is a perl library pcre isnt it? I don't understand your question -- if it was actually intended for me, that is. -Ralph ___ clamav-users mailing list clamav-users@lists.clamav.net

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Ralph Seichter via clamav-users
* Reio Remma via clamav-users: > That's the trouble with RHEL/CentOS - they stick with the major > software versions they initially come with for the lifetime of > their distribution version. If there are no official Python 3.7 packages for these distributions, maybe community packages are

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Rxx Mxxxxxx via clamav-users
That is a perl library pcre isnt it?On Feb 18, 2020 1:51 PM, Reio Remma via clamav-users wrote:On 18.02.2020 19:28, Ralph Seichter via clamav-users wrote: > * Reio Remma via clamav-users: > >> RHEL/CentOS 8 are on version 3.6 of Python and they would be excluded >> from running the script. >

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Reio Remma via clamav-users
On 18.02.2020 19:28, Ralph Seichter via clamav-users wrote: * Reio Remma via clamav-users: RHEL/CentOS 8 are on version 3.6 of Python and they would be excluded from running the script. I don't actually know if Python 3.6 would work, not having any machine with this old version available.

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Ralph Seichter via clamav-users
I just remembered that I use a feature of the subprocess module that was introduced with Python 3.7. So yes, version 3.7 is a hard requirement. -Ralph ___ clamav-users mailing list clamav-users@lists.clamav.net

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Ralph Seichter via clamav-users
* Reio Remma via clamav-users: > RHEL/CentOS 8 are on version 3.6 of Python and they would be excluded > from running the script. I don't actually know if Python 3.6 would work, not having any machine with this old version available. Python version 3.7 was released in June 2018, and version 3.8

Re: [clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Reio Remma via clamav-users
On 18.02.2020 17:24, Ralph Seichter via clamav-users wrote: After the recent discussion of various security risks posed by the clamav-unofficial-sigs script, I have written "Fangfrisch" as a secure and convenient replacement. It was meant for personal use at first, but it works so well for me

[clamav-users] Fangfrisch: Secure antivirus signature updates for ClamAV

2020-02-18 Thread Ralph Seichter via clamav-users
After the recent discussion of various security risks posed by the clamav-unofficial-sigs script, I have written "Fangfrisch" as a secure and convenient replacement. It was meant for personal use at first, but it works so well for me that I have taken the time to write a full documentation, in the