Your message dated Thu, 9 Nov 2017 21:11:40 +0100
with message-id <[email protected]>
and subject line Re: clamav-testfiles wrong result
has caused the Debian Bug report #879490,
regarding clamav-testfiles wrong result
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
879490: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879490
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: clamav
Version: 0.99.2+dfsg-0+deb7u3
Severity: minor
Dear Maintainer,
*** Please consider answering these questions, where appropriate ***
With Debian jessie, one of the test files is identified wrongly;
which has absolutely no impact on the package's functionnality.
$ bin/test_clamdscan.sh
34c34
< /usr/share/clamav-testfiles/clam-pespin.exe: Clamav.Test.File-6 FOUND
---
> /usr/share/clamav-testfiles/clam-pespin.exe: Win.Trojan.Sality-90234 FOUND
$ cat bin/test_clamdscan.sh
#! /bin/bash
clamdscan /usr/share/clamav-testfiles/* \
| egrep -v '^Time: ' \
| diff <(cat <<"EOF"
/usr/share/clamav-testfiles/clam.7z: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.arj: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-aspack.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.bin-be.cpio: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.bin-le.cpio: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.bz2.zip: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.cab: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam_cache_emax.tgz: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.chm: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.d64.zip: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.ea05.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.ea06.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.exe.binhex: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.exe.bz2: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.exe.html: OK
/usr/share/clamav-testfiles/clam.exe.mbox.base64: OK
/usr/share/clamav-testfiles/clam.exe.mbox.uu: OK
/usr/share/clamav-testfiles/clam.exe.rtf: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.exe.szdd: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-fsg.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.impl.zip: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam_IScab_ext.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam_IScab_int.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam_ISmsi_ext.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam_ISmsi_int.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.mail: OK
/usr/share/clamav-testfiles/clam-mew.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.newc.cpio: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-nsis.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.odc.cpio: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.ole.doc: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.pdf: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-pespin.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-petite.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.ppt: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.sis: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.tar.gz: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.tnef: OK
/usr/share/clamav-testfiles/clam-upack.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-upx.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-v2.rar: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-v3.rar: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-wwpack.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam-yc.exe: Clamav.Test.File-6 FOUND
/usr/share/clamav-testfiles/clam.zip: Clamav.Test.File-6 FOUND
----------- SCAN SUMMARY -----------
Infected files: 41
EOF
) -
*** End of the template - remove these lines ***
-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav
Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
StatsHostID = "auto"
StatsEnabled disabled
StatsPEDisabled = "yes"
StatsTimeout = "10"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog = "yes"
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
ExtendedDetectionInfo = "yes"
PidFile disabled
TemporaryDirectory = "/tmp"
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "despam"
LocalSocketMode = "666"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "104857600"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "3"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "3600"
DisableCache disabled
VirusEvent disabled
ExitOnOOM disabled
AllowAllMatchScan = "yes"
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = "despam"
AllowSupplementaryGroups disabled
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "60000"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail disabled
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
PartitionIntersection disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
OLE2BlockMacros disabled
ScanPDF = "yes"
ScanSWF = "yes"
ScanXMLDOCS = "yes"
ScanHWP3 = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
ForceToDisk disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "20"
MaxFiles = "10000"
MaxEmbeddedPE = "10485760"
MaxHTMLNormalize = "10485760"
MaxHTMLNoTags = "2097152"
MaxScriptNormalize = "5242880"
MaxZipTypeRcg = "1048576"
MaxPartitions = "50"
MaxIconsPE = "100"
MaxRecHWP3 = "16"
PCREMatchLimit = "10000"
PCRERecMatchLimit = "5000"
PCREMaxFileSize = "26214400"
ScanOnAccess disabled
OnAccessMountPath disabled
OnAccessIncludePath disabled
OnAccessExcludePath disabled
OnAccessExcludeUID disabled
OnAccessMaxFileSize = "5242880"
OnAccessDisableDDD disabled
OnAccessPrevention disabled
OnAccessExtraScanning disabled
DevACOnly disabled
DevACDepth disabled
DevPerformance disabled
DevLiblog disabled
DisableCertCheck disabled
Config file: freshclam.conf
---------------------------
StatsHostID disabled
StatsEnabled disabled
StatsTimeout disabled
LogFileMaxSize = "4294967295"
LogTime disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
PidFile disabled
DatabaseDirectory = "/var/lib/clamav/"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "5"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net", "database.clamav.net",
"clamav.easynet.fr", "clamav.switch.ch"
PrivateMirror disabled
MaxAttempts = "5"
ScriptedUpdates = "yes"
TestDatabases = "yes"
CompressLocalDatabase disabled
ExtraDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
DetectionStatsHostID disabled
SafeBrowsing disabled
Bytecode = "yes"
clamav-milter.conf not found
Software settings
-----------------
Version: 0.99.2
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2
LIBXML2 PCRE ICONV JSON RAR JIT
Database information
--------------------
Database directory: /var/lib/clamav/
WARNING: freshclam.conf and clamd.conf point to different database directories
main.cld: version 58, sigs: 4566249, built on Wed Jun 7 23:38:10 2017
bytecode.cld: version 313, sigs: 73, built on Thu Sep 28 17:12:38 2017
daily.cld: version 23976, sigs: 1759934, built on Sun Oct 22 06:02:43 2017
Total number of signatures: 6326256
Platform information
--------------------
uname: Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) x86_64
OS: linux-gnu, ARCH: i386, CPU: i486
Full OS version: Debian GNU/Linux 7.11 (wheezy)
zlib version: 1.2.7 (1.2.7), compile flags: 55
Triple: i386-pc-linux-gnu
CPU: i686, Little-endian
platform id: 0x0a1152520404070201040702
Build information
-----------------
GNU C: 4.7.2 (4.7.2)
GNU C++: 4.7.2 (4.7.2)
CPPFLAGS: -D_FORTIFY_SOURCE=2
CFLAGS: -g -O2 -fPIE -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security -Wall -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE
-D_LARGEFILE64_SOURCE
CXXFLAGS:
LDFLAGS: -fPIE -pie -Wl,-z,relro -Wl,-z,now -Wl,--as-needed
Configure: '--build=i486-linux-gnu' '--prefix=/usr' '--includedir=/usr/include'
'--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc'
'--localstatedir=/var' '--libexecdir=/usr/lib/clamav'
'--disable-maintainer-mode' '--disable-dependency-tracking' 'CFLAGS=-g -O2
-fPIE -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security -Wall -D_FILE_OFFSET_BITS=64'
'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall
-D_FILE_OFFSET_BITS=64' 'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now
-Wl,--as-needed' '--with-dbdir=/var/lib/clamav' '--sysconfdir=/etc/clamav'
'--disable-clamav' '--disable-unrar' '--enable-milter' '--enable-dns-fix'
'--with-libjson' '--with-gnu-ld' '-with-system-llvm=/usr/bin/llvm-config'
'--with-llvm-linking=dynamic' 'build_alias=i486-linux-gnu'
sizeof(void*) = 4
Engine flevel: 82, dconf: 82
--- data dir ---
total 424032
-rw-r--r-- 1 clamav clamav 754688 Sep 28 20:52 bytecode.cld
-rw-r--r-- 1 clamav clamav 145904 Aug 13 2004 clamav-cb2c1c03be783b9d
-rw-r--r-- 1 clamav clamav 24352 Jul 4 2004 clamav-eac3491f91258d7e
-rw-r--r-- 1 clamav clamav 125763584 Oct 22 06:26 daily.cld
-rw-r--r-- 1 root root 33 Jun 9 2004 etc.freshclam.conf.md5sum
-rw-r--r-- 1 clamav clamav 307499008 Jun 8 01:39 main.cld
-rw------- 1 clamav clamav 1872 Oct 22 09:39 mirrors.dat
-- System Information:
Debian Release: 7.11
APT prefers oldoldstable-updates
APT policy: (500, 'oldoldstable-updates'), (500, 'oldoldstable')
Architecture: i386 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=fr_CH.ISO-8859-1 (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages clamav depends on:
ii clamav-freshclam [clamav-data] 0.99.2+dfsg-0+deb7u3
ii libc6 2.13-38+deb7u12
ii libclamav7 0.99.2+dfsg-0+deb7u3
ii libcurl3 7.26.0-1+wheezy21
ii libssl1.0.0 1.0.1t-1+deb7u2
ii zlib1g 1:1.2.7.dfsg-13
Versions of packages clamav recommends:
ii clamav-base 0.99.2+dfsg-0+deb7u3
Versions of packages clamav suggests:
pn clamav-docs <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
On 2017-10-22 09:43:56 [+0200], Marc SCHAEFER wrote:
> Package: clamav
> Version: 0.99.2+dfsg-0+deb7u3
> Severity: minor
this is oldoldstable.
> With Debian jessie, one of the test files is identified wrongly;
Jessie deb8, you reported against deb7
> which has absolutely no impact on the package's functionnality.
>
> /usr/share/clamav-testfiles/clam.exe.html: OK
> /usr/share/clamav-testfiles/clam.exe.mbox.base64: OK
> /usr/share/clamav-testfiles/clam.exe.mbox.uu: OK
> /usr/share/clamav-testfiles/clam.mail: OK
> /usr/share/clamav-testfiles/clam.tnef: OK
one? Which one? I think you mean five.
>
> Config file: clamd.conf
> -----------------------
> ScanMail disabled
I think those five files are marked okay because you disabled Email
scanning. As part of the build-process the clamav scans all testfiles
(except for .rar) with default config and the build would fail if clamav
would report OK for them.
I just tested on one of my Jessie boxes:
|~$ clamscan /usr/share/clamav-testfiles/clam.exe.html
|/usr/share/clamav-testfiles/clam.exe.html: Clamav.Test.File-6 FOUND
|
|----------- SCAN SUMMARY -----------
|Known viruses: 6336606
|Engine version: 0.99.2
|Scanned directories: 0
|Scanned files: 1
|Infected files: 1
|Data scanned: 0.00 MB
|Data read: 0.00 MB (ratio 0.00:1)
|Time: 5.441 sec (0 m 5 s)
which looks okay and therefore I am closing this report since I think it
is just a config switch.
Sebastian
--- End Message ---
_______________________________________________
Pkg-clamav-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
