On Wed, 20 May 2009 06:45:43 -0700
Bill Landry <[email protected]> wrote:

> I wish ClamAV had instead opted to whitelist based on the actual
> hexadecimal signature instead of the signature file:line:name, as that
> would make keeping the .ign files up-to-date for a script a much easier
> process.
> 
> ClamAV, please consider this a feature request...  :-)

Hi Bill,

the .ign database was designed with the ClamAV db maintainers
and not users in mind. It allows us to disable specific signatures
in main.cvd until a new version is published. It requires this precise
information about target signatures for two reasons: safety
and speed. By requiring the line numbers and signature names
the whitelisting mechanism is more resistant to errors (which
could have really bad consequences) but also doesn't slow down
loading of the databases (because we use the line numbers
as the main filter).

I don't know what your script has to do with the .ign databases
but believe it would be much more effective and easier to implement
any workarounds in the script instead of the clamav engine.

Thanks,

-- 
   oo    .....         Tomasz Kojm <[email protected]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Wed May 20 18:37:04 CEST 2009
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to