6a0abb897a
Adds --max-scantime clamscan option and MaxScanTime clamd config option.
...
--max-scantime replaces the --timelimit clamscan option that had been experimental.
Default max-scantime set to 2 minutes (120000 milliseconds).
6 years ago
4fee702fc3
clamonacc - conform to clang-format
6 years ago
52dc3149e2
clamonacc - add pthread conditional wait to event consumer queue; add uname exclusion; add error handling for selinux permission denied case when reading fanotify kernel event queue; remove deprecated clamuko references; update clamd.conf.sample; remove unsused options in help output; add daemonization/foreground command-line option; add retry and deny on error functionality
6 years ago
132dd49bf9
clamonacc - add maxthreads config option; fix issue where mutex wasn't being unlocked on empty case; fix issue where pathname wasn't being passed in; added some noisy logging
6 years ago
0d78af13f1
clamonacc - add curl support for send receive and connecting to clam daemon; add new option for timeout when using curl; refactor all scanning into self-contained scanning thread; add non-blocking wait (via select) for receiving and sending data to and from clam daemon
6 years ago
e5ae2ad9fa
clamonacc - clean/fix up command line option arg passing; use only logg for printing
6 years ago
497b72eae8
clamonacc - cleanup/improve logging; pare down uneeded proto functions; add initialfunctionality for watch and exclude list command line options; use reentrant safe onas_scan function
6 years ago
5f4f69102d
Correcting types from int to cl_error_t where appropriate. Eliminating unused variables and referencing unused parameters to remove warnings.
6 years ago
06e3c1c896
Increased default freshclam receive timeout from 30 sec to 60 sec. Set default DatabaseMirror back to database.clamav.net, now that TLS/SSL is enabled on the mirrors that back the CDN. Some other updates to the man pages that were missing from previous changes.
6 years ago
cef54eaf8f
Freshclam refresh. This update makes libcurl a hard requirement for ClamAV.
...
New features added to freshclam:
- Update signature definitions over HTTPS.
- Support for HTTP protocol v1.1 (formerly v1.0).
- New libfreshclam library with an all new API and versioning separate from libclamav (v2.0.0). This library is now build and installed alongside libclamav as a hard dependency of freshclam.
- The ability to opt-in and opt-out of standard and optional official ClamAV databases (ExtraDatabase, ExcludeDatabase)
- The option to specify the protocol and port number of official and private mirror servers.
- Support for additional types of proxy servers beyond plain HTTP (SOCKS 4, SOCKS 5).
Features removed from freshclam:
- Mirror management (mirrors.dat) file. This feature is no longer needed as official signature databases are distributed using a paid content delivery network (Cloudflare).
This commit also adds the following features for Windows users:
- The clamsubmit tool.
- The json-c library dependency, which will enable the --gen-json option in clamscan.
- Third party libraries under the win32/3rdparty directory have been removed. Developers will need to build the libraries separately from ClamAV and provide the headers and lib/dll library files the same way they do for OpenSSL. This includes libxml2, pthread-win32, bzip2, zlib, pcre2 as well as new dependencies: curl, json-c. Developers are encouraged to use the build tool Mussels to simplify this task.
6 years ago
52cddcbcfd
Updating and cleaning up copyright notices.
6 years ago
29b6da0213
bb12227: Patch to adjust the default CommandReadTimeout to reduce the chance of mail loss when using clamav-milter with the TCP socket. Contribution by Scott Kitterman.
6 years ago
72fd33c8b2
clang-format'd using new .clang-format rules.
6 years ago
78606d72ed
Correction to logic enabling/disabling heuristic alerts.
7 years ago
f61e92da8f
Changing numerous scan options' names, primarily those of heuristic signatature alert options. Original options (command line and clamd) will remain as deprecated & undocumented for a couple releases. Added 2 extra scan options to allow users to differentiate between alerting on encrypted archives vs encrypted documents (bb11911).
7 years ago
a8c77430fd
Removed cfgfile, line variables from optadditem()
...
cfgfile and line variables make no sense as the function optadditem() exists to allow library users to set options programmatically without a config file.
7 years ago
33f14a688d
Include filename in config file line reports
7 years ago
964a1e7321
Converting http urls to https urls. Primary focus was on clamav.net urls. I updated a couple others and fixes a few broken links as well. There are many (non-clamav.net) urls I didn't address, especially in 3rd party or contrib code.
8 years ago
7cd9337a70
Spelling Adjustments ( #30 )
...
* spelling: accessed
* spelling: alignment
* spelling: amalgamated
* spelling: answers
* spelling: another
* spelling: acquisition
* spelling: apitid
* spelling: ascii
* spelling: appending
* spelling: appropriate
* spelling: arbitrary
* spelling: architecture
* spelling: asynchronous
* spelling: attachments
* spelling: argument
* spelling: authenticode
* spelling: because
* spelling: boundary
* spelling: brackets
* spelling: bytecode
* spelling: calculation
* spelling: cannot
* spelling: changes
* spelling: check
* spelling: children
* spelling: codegen
* spelling: commands
* spelling: container
* spelling: concatenated
* spelling: conditions
* spelling: continuous
* spelling: conversions
* spelling: corresponding
* spelling: corrupted
* spelling: coverity
* spelling: crafting
* spelling: daemon
* spelling: definition
* spelling: delivered
* spelling: delivery
* spelling: delimit
* spelling: dependencies
* spelling: dependency
* spelling: detection
* spelling: determine
* spelling: disconnects
* spelling: distributed
* spelling: documentation
* spelling: downgraded
* spelling: downloading
* spelling: endianness
* spelling: entities
* spelling: especially
* spelling: empty
* spelling: expected
* spelling: explicitly
* spelling: existent
* spelling: finished
* spelling: flexibility
* spelling: flexible
* spelling: freshclam
* spelling: functions
* spelling: guarantee
* spelling: hardened
* spelling: headaches
* spelling: heighten
* spelling: improper
* spelling: increment
* spelling: indefinitely
* spelling: independent
* spelling: inaccessible
* spelling: infrastructure
Conflicts:
docs/html/node68.html
* spelling: initializing
* spelling: inited
* spelling: instream
* spelling: installed
* spelling: initialization
* spelling: initialize
* spelling: interface
* spelling: intrinsics
* spelling: interpreter
* spelling: introduced
* spelling: invalid
* spelling: latency
* spelling: lawyers
* spelling: libclamav
* spelling: likelihood
* spelling: loop
* spelling: maximum
* spelling: million
* spelling: milliseconds
* spelling: minimum
* spelling: minzhuan
* spelling: multipart
* spelling: misled
* spelling: modifiers
* spelling: notifying
* spelling: objects
* spelling: occurred
* spelling: occurs
* spelling: occurrences
* spelling: optimization
* spelling: original
* spelling: originated
* spelling: output
* spelling: overridden
* spelling: parenthesis
* spelling: partition
* spelling: performance
* spelling: permission
* spelling: phishing
* spelling: portions
* spelling: positives
* spelling: preceded
* spelling: properties
* spelling: protocol
* spelling: protos
* spelling: quarantine
* spelling: recursive
* spelling: referring
* spelling: reorder
* spelling: reset
* spelling: resources
* spelling: resume
* spelling: retrieval
* spelling: rewrite
* spelling: sanity
* spelling: scheduled
* spelling: search
* spelling: section
* spelling: separator
* spelling: separated
* spelling: specify
* spelling: special
* spelling: statement
* spelling: streams
* spelling: succession
* spelling: suggests
* spelling: superfluous
* spelling: suspicious
* spelling: synonym
* spelling: temporarily
* spelling: testfiles
* spelling: transverse
* spelling: turkish
* spelling: typos
* spelling: unable
* spelling: unexpected
* spelling: unexpectedly
* spelling: unfinished
* spelling: unfortunately
* spelling: uninitialized
* spelling: unlocking
* spelling: unnecessary
* spelling: unpack
* spelling: unrecognized
* spelling: unsupported
* spelling: usable
* spelling: wherever
* spelling: wishlist
* spelling: white
* spelling: infrastructure
* spelling: directories
* spelling: overridden
* spelling: permission
* spelling: yesterday
* spelling: initialization
* spelling: intrinsics
* space adjustment for spelling changes
* minor modifications by klin
8 years ago
a1da16eee7
bb11025: Correcting PUA URL in man pages and shared optparser.
8 years ago
961ab24c66
bb11996 - deprecate AllowSupplementaryGroups more gracefully.
8 years ago
ef48b6af14
0.99.3 - bb11978 - onas - adding ExcludeRootUID option as cleaner alternative to using negative values to whitelist root UIDs using the ExcludeUID option
8 years ago
a20128bb21
0.99.3 - bb11963 - ensuring users have a way to correctly exlcude UID 0 when using the onaccess scanner
8 years ago
22880de038
eliminating additional option references to stat collection and submission until such time as a new stats website and associated clamav code is ready.
8 years ago
dc30ba752d
bb11910 - remove DetectionStatsHostID.
8 years ago
7a85da5c9a
increasing size of pcre match limit
9 years ago
e7dfe57d3a
bb11522 - additional block-max w.i.p. : clamd, man pages.
9 years ago
312b7e5391
bb11522 - enable clamscan option --blockmax to flag files as virus Heuristic.Limits.Exceeded when --max-filesize, --max-scansize, or --max-recursion is exceeded.
9 years ago
9c30a4fc6e
sigtool: patch hybrid cvd generation
9 years ago
832d44e748
sig: convert .ith to .imp; add .imp to sigtool
10 years ago
2ea4230df2
bb11557 - drop AllowSupplementaryGroups option and make it default, patch by Sebastian A. Siewior
10 years ago
f4265a5acd
Adds a module to use Prelude and connect to a prelude manager
...
To enable prelude compile with ./configure --enable-prelude
In ClamAV configuration file set Prelude Enable on yes and choose an analyzer name with PreludeAnalyzerName (default ClamAV).
You need to have a prelude manager to use this module.
10 years ago
ce6becd511
bb11471 - add clamscan parameter --normalize=no for yara compatibility.
10 years ago
ec3e946d11
additional change of PCREMaxFileSize from MATCH_NUMBER to MATCH_SIZE
10 years ago
c18363244b
bb1436 - clamscan 'block-macros' option. Patch by Kai Risku.
10 years ago
92e8a9ed93
bb11455 - patch by Mark Allan to add show-progress option to freshclam.
10 years ago
b68375fdbb
bb10568 - patch from Andreas Cadhalpun to add systemd support for clamd and freshclam
10 years ago
9ee4cea182
optparser: fix to pcre-match-limit option
10 years ago
ea9ffd291b
add scanning options for scanning xml-based documents (MSXML, OOXML, HWPML) and HWP3
10 years ago
731c8e6213
hwp3.x: add support for maximum recursive calls to hwp3 parsing
10 years ago
41e8fd628f
change PCREMaxFileSize from MATCH_NUMBER to MATCH_SIZE to match documentation
10 years ago
7ee8537215
onas: adding optional extra scanning for inotify events
10 years ago
cf703fa100
onas: changing clamd NotifyOnly option to Prevention and disabling Prevention option by default.
10 years ago
46a35abe56
mass update of copyright headers
10 years ago
f408e5b2ce
fanotify: consolidating prevention options into a single NotifyOnly option.
10 years ago
2217edf5bd
fanotify: adding option to watch and notify on mountpoints.
10 years ago
bbb244d97d
fanotify: adding clamd configuration toggle options to prevent read and access attempts
10 years ago
4a1bd5c89d
fanotify: adding clamd option to disable ddd
10 years ago
5ae59b959d
Overhauling clamd onaccess scanning to support dynamic directory determination.
10 years ago
bbfac25813
bb11343: Adding yara-rules (yes|no|only) runtime option for clamscan.
11 years ago
Micah Snyder (micasnyd)