On Wed, 20 May 2009 06:45:43 -0700 Bill Landry <[email protected]> wrote:
> I wish ClamAV had instead opted to whitelist based on the actual > hexadecimal signature instead of the signature file:line:name, as that > would make keeping the .ign files up-to-date for a script a much easier > process. > > ClamAV, please consider this a feature request... :-) Hi Bill, the .ign database was designed with the ClamAV db maintainers and not users in mind. It allows us to disable specific signatures in main.cvd until a new version is published. It requires this precise information about target signatures for two reasons: safety and speed. By requiring the line numbers and signature names the whitelisting mechanism is more resistant to errors (which could have really bad consequences) but also doesn't slow down loading of the databases (because we use the line numbers as the main filter). I don't know what your script has to do with the .ign databases but believe it would be much more effective and easier to implement any workarounds in the script instead of the clamav engine. Thanks, -- oo ..... Tomasz Kojm <[email protected]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed May 20 18:37:04 CEST 2009 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
