Re: [clamav-users] Disable official database

2019-08-26 Thread G.W. Haywood via clamav-users
Hi there, On Mon, 26 Aug 2019, Kris Deugau wrote: G.W. Haywood via clamav-users wrote: 6. The same, using a database directory containing just an empty file: mail6:~/src/net/mail/clamav-0.101.4/test$ >>> ls -l /etc/mail/clamav/empty/ total 0 -rw-r--r-- 1 root root 0 Aug 25 10:25 empty.ign2

Re: [clamav-users] Disable official database

2019-08-26 Thread G.W. Haywood via clamav-users
Hi there, On Mon, 26 Aug 2019, Kris Deugau wrote: The only constant is that there must be at least one signature database, even if it's a trivial hash database with one signature that matches on an empty file. AFAICT the signature database file doesn't even need to have any signatures in it;

Re: [clamav-users] Disable official database

2019-08-26 Thread Kris Deugau
G.W. Haywood via clamav-users wrote: To find out what might work and what might not, here's what I did: == Using 'clamd': 8<-- 1. I moved the 'main.cld' and

Re: [clamav-users] Disable official database

2019-08-26 Thread Kris Deugau
Joel Esler (jesler) via clamav-users wrote: I mean, it's possible not to download the official definitions and just point at a custom file right? *nod* This works fine. I have a secondary Clam instance set up to use only a selection of third-party signatures that I do not absolutely trust

Re: [clamav-users] Disable official database

2019-08-25 Thread G.W. Haywood via clamav-users
Hi there, On Sun, 25 Aug 2019, Kees Theunissen wrote: On Sat, 24 Aug 2019, azu...@pobox.sk wrote: is it possible to disable official virus database? I would like to use only custom database. Thanks for info. ... I didn't need virus databases at all ... (I didn't even test if I could start

Re: [clamav-users] Disable official database

2019-08-24 Thread Kees Theunissen
On Sat, 24 Aug 2019, azu...@pobox.sk wrote: > Hi, > > is it possible to disable official virus database? I would like to use only > custom database. Thanks for info. Before I retired nearly a year ago I ran for several years an instance of clamd on the incoming mail servers at work that should

Re: [clamav-users] Disable official database

2019-08-24 Thread Andrew Williams
There is a configuration option to have ClamAV only load the official signatures but this setting is disabled by default (it's the OfficialDatabaseOnly setting for clamd, and '--official-db-only' for clamscan). One exception to this is for bytecode signatures - only official bytecode signatures

Re: [clamav-users] Disable official database

2019-08-24 Thread G.W. Haywood via clamav-users
Hi there, On Sat, 24 Aug 2019, Joel Esler (jesler) wrote: I mean, it's possible not to download the official definitions and just point at a custom file right? No idea. Haven't tried it. If you can, it seems like it would be a security hole. The code seems to be saying that it wants to

Re: [clamav-users] Disable official database

2019-08-24 Thread Joel Esler (jesler) via clamav-users
I mean, it's possible not to download the official definitions and just point at a custom file right? > On Aug 24, 2019, at 10:29 AM, G.W. Haywood via clamav-users > wrote: > > Hi there, > > On Sat, 24 Aug 2019, azu...@pobox.sk wrote: > >> is it possible to disable official virus database?

Re: [clamav-users] Disable official database

2019-08-24 Thread G.W. Haywood via clamav-users
Hi there, On Sat, 24 Aug 2019, azu...@pobox.sk wrote: is it possible to disable official virus database? I would like to use only custom database. Thanks for info. A quick look at the code in libclamav/readdb.c suggests to me that this won't be very straightforward. The name of the 'daily'

[clamav-users] Disable official database

2019-08-24 Thread azurit
Hi, is it possible to disable official virus database? I would like to use only custom database. Thanks for info. azur ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us