From ea7b47f9fdc9a3ce8189a4ce751d29aec8f0fe75 Mon Sep 17 00:00:00 2001 From: mirtouf Date: Fri, 10 Aug 2018 12:12:15 +0200 Subject: [PATCH 1/2] Update README.md Disabling Yara rules for clamav releases > 0.100 --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 36630fd8..5f76ca92 100644 --- a/README.md +++ b/README.md @@ -598,6 +598,9 @@ Create your `user.conf` file under `/mnt/docker/mail/clamav-unofficial-sigs` dir # - 6. Enter the authorisation signature into the config securiteinfo_authorisation_signature: replacing YOUR-SIGNATURE-NUMBER with your authorisation signature from the link # securiteinfo_authorisation_signature="YOUR-SIGNATURE-NUMBER" +# We disable Yara rules for now because they are broken with clamav releases > 0.100 +enable_yararules="no" + # After you have completed the configuration of this file, set the value to "yes" user_configuration_complete="yes" ``` From 914ad7e72457c13efac81feeb176a986a5a2a215 Mon Sep 17 00:00:00 2001 From: mirtouf Date: Fri, 10 Aug 2018 14:50:40 +0200 Subject: [PATCH 2/2] Update README.md Added https://github.com/extremeshok/clamav-unofficial-sigs/issues/203 reference for Yara rules bug with clamav > 0.100 Added yararulesproject_enabled="no" --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 5f76ca92..397731ac 100644 --- a/README.md +++ b/README.md @@ -564,6 +564,7 @@ Readme : https://github.com/extremeshok/clamav-unofficial-sigs #### Enable clamav-unofficial-sigs Create your `user.conf` file under `/mnt/docker/mail/clamav-unofficial-sigs` directory to configure clamav-unofficial-sigs updater. This file override the default configuration specified in [os.conf](https://github.com/hardware/mailserver/blob/master/rootfs/etc/clamav/unofficial-sigs/os.conf) and [master.conf](https://github.com/hardware/mailserver/blob/master/rootfs/etc/clamav/unofficial-sigs/master.conf). Don't forget, once you have completed the configuration of this file, set the value of `user_configuration_complete` to `yes` otherwise the script will not be able to execute. +As [Yara rules are broken with clamav ≥ 0.100](https://github.com/extremeshok/clamav-unofficial-sigs/issues/203), we disable Yara rules for now. ```ini # /mnt/docker/mail/clamav-unofficial-sigs/user.conf @@ -599,6 +600,7 @@ Create your `user.conf` file under `/mnt/docker/mail/clamav-unofficial-sigs` dir # securiteinfo_authorisation_signature="YOUR-SIGNATURE-NUMBER" # We disable Yara rules for now because they are broken with clamav releases > 0.100 +yararulesproject_enabled="no" enable_yararules="no" # After you have completed the configuration of this file, set the value to "yes"