subject:"\[clamav\-users\] ignore yara rule"

Re: [clamav-users] ignore yara rule

2022-04-12 Thread Arnaud Jacques

Hello Dino, echo -n "invalid_trailer_structure" >>local.ign2 should do the job. Le 12/04/2022 à 18:58, Dino Edwards via clamav-users a écrit : Hi, Using clamav-unofficial-signatures and I’m trying to ignore a yara rule due to many FPs. The blocked message refers to the

[clamav-users] ignore yara rule

2022-04-12 Thread Dino Edwards via clamav-users

Hi, Using clamav-unofficial-signatures and I'm trying to ignore a yara rule due to many FPs. The blocked message refers to the YARA.invalid_trailer_structure.UNOFFICIAL as the offending signature. However, entering any of following in local.ign2 file, clamav ignores it and keeps blocking: