Re: [clamav-users] Malwarepatrol false positive

2018-09-04 Thread Steve Basford
On 4 September 2018 18:52:04 Mark G Thomas wrote: Hi, Good grief! Yet another. So much for Malware patrol! Sigh. # sigtool --find-sigs MBL_13497693| sigtool --decode-sigs Pushing out a whitelist entry to the mirrors as I type. Cheers, Steve Twitter: @sanesecurity

Re: [clamav-users] Malwarepatrol false positive

2018-09-04 Thread Mark G Thomas
Hi, Good grief! Yet another. So much for Malware patrol! # sigtool --find-sigs MBL_13497693| sigtool --decode-sigs VIRUS NAME: MBL_13497693 DECODED SIGNATURE: https://drive.google.com Mark On Fri, Aug 31, 2018 at 06:25:10PM +0100, Steve Basford wrote: > > On 31 August 2018 17:52:26 Mark G

Re: [clamav-users] secure download of .cvd files ?

2018-09-04 Thread Reindl Harald
Am 31.08.18 um 14:37 schrieb Michael Orlitzky: > To fix it: if you're going to use a file under /tmp, then use a secure > function like mktemp() to obtain it. But if you're running this job as a > specific user, you might as well give him a special place to work like > /var/tmp/clamav-updates