DMG support was just added in the last version of ClamAV. How long ago did you do this testing?
On Mar 20, 2014, at 8:22 PM, Dale Walsh <[email protected]> wrote: > You did miss it but it's a two headed nail. > > PDF, DMG, XAR and RAR have had issues not recognizing the test viruses to > name just a couple that spring to mind that we've had trouble with and this > all started happening when the clang and crap entered the picture. > > I've worked with the developers in the past, once the build environment > dependancies changed and I was told I had to upgrade my OS and build tools is > when it was no longer possible to resolve these issues as the update solely > for the purpose of building ClamAV is not an option and I shouldn't be forced > to use someone else's built tool preferences just because they have the > luxury of updating on a whim or purely for bragging rights. > > It does not matter if my OS is dated, security patches are applied to the > build tools as they become available and this seems to satisfy all other > software that build from source except ClamAV. > > Having everything build with GCC 4.0 would allow me/us to re-deploy ClamAV > and contribute to the code base again (I have in the past) but the chances of > this are slim to non from what I recall because my OS and build tools are > dated and listening to rants about ancient and deprecated is nothing more > than someone spewing stupidity. > > The fact that I ensure all bugs and updates to the build tools are > fixed/added allows me to keep everything in harmony and there is no reason to > update anything to build a single software package when all other software > sources seem to be content with the existing build environment. > > If you wish to go off-list to continue the discussion I have no objections. > > > -- Dale > > > > On Mar 20, 2014, at 16:35 PM, Joel Esler (jesler) wrote: > >> Dale, >> >> Thanks for your email. I’m not sure exactly what you are referring to. >> Maybe I am missing a connection here or something, but the discussion was >> around scanning DMG and XAR, which I think, if there’s a issue with, we’d be >> more than happy to work with anyone to try and square away. >> >> You seem to be discussing a build issue, and you say that it’s a waste of >> time. When did you get the impression that working with the developers was >> a waste of time? If we’re not communicating well enough, we can fix that. >> But I think the team is doing a good job of that judging by the amount of >> complaints I have received since we took over the project from the old >> ClamAV team. >> >> Please let me know if we need to take this offline and discuss or anything I >> can do to help. >> >> -- >> Joel Esler >> Open Source Manager >> Threat Intelligence Team Lead >> Vulnerability Research Team >> >> On Mar 20, 2014, at 3:55 PM, Dale Walsh >> <[email protected]<mailto:[email protected]>> wrote: >> >> Mark, this has been an issue for many versions along with a slew of others >> things not working as expected. >> >> As much as I liked ClamAV, we've abandoned it as a mail solution shortly >> after things stopped working correctly and they changed the required build >> tools so you can no longer build it with GCC 3.3/4.0/4.1/4.2 and have a >> fully functional app. >> >> Yes there are flags to get it to build but certain modules and features >> don't build and making an incomplete and partially functional binary isn't >> appealing. >> >> Advice on updating build tools is a waste of time as there is no reason to >> update the build tools just to build ClamAV as it's the only one that has >> this ridiculous built-tool requirement and only an idiot would tell me to >> update. >> >> My thoughts on this is simple, if it doesn't build with the basic GNU GCC >> compiler tools then it's seriously flawed and needs these other tools to >> overcome the short-comings of poorly written/implemented code. >> >> When I say build, I mean build with full functionality so don't go off the >> deep-end stating it builds, partial functionality may be acceptable to you >> bhut it isn't to me. >> >> At this time, for personal use, I use the source code but repackage the >> build environment to work with what I have and I'm comfortable with >> submitting corrections and patches, too much focus and complaints on my >> build tools so why waste my time. >> >> -- Dale >> >> On Mar 19, 2014, at 11:34 AM, Rafael Ferreira wrote: >> >> Interesting... let me run some tests and get back to you. >> >> On Mar 19, 2014, at 8:33 AM, Mark Allan >> <[email protected]<mailto:[email protected]>> wrote: >> >> Just out of interest, did you test to see if it *actually* worked? >> >> My configure output shows that dmg and xar are supported, but it doesn't >> actually detect the Eicar test file within a disk image. >> >> configure: Summary of engine detection features >> autoit_ea06 : yes >> bzip2 : ok >> zlib : /usr >> unrar : yes >> dmg and xar : yes, from /usr >> >> When I create a new disk image, copy the Eicar test file in, and scan the >> dmg, it shows up as being clean. >> >> clamscan test.dmg >> test.dmg: OK >> >> ----------- SCAN SUMMARY ----------- >> Known viruses: 3259558 >> Engine version: 0.98.1 >> Scanned directories: 0 >> Scanned files: 1 >> Infected files: 0 >> Data scanned: 10.07 MB >> Data read: 10.02 MB (ratio 1.01:1) >> Time: 4.845 sec (0 m 4 s) >> >> Does this work as expected for anyone else? >> >> Mark >> >> On 10 Feb 2014, at 23:38, Rafael Ferreira >> <[email protected]<mailto:[email protected]>> wrote: >> >> That worked, thanks! >> >> On February 10, 2014 at 4:29:41 PM, Steven Morgan >> ([email protected]<mailto:[email protected]>) wrote: >> >> Rafael, >> >> Probably all you need to do install libxml&libxml2-dev, which is used by >> dmg and xar, then do your configure/make. >> >> Steve >> >> >> On Mon, Feb 10, 2014 at 6:05 PM, Rafael Ferreira >> <[email protected]<mailto:[email protected]>>wrote: >> >> >> Folks, >> >> I'm compiling clamav 0.98.1 on Linux (Ubuntu 12.04 LTS) and I'm not >> getting the new super awesome DMG and XAR file support: >> >> configure: Summary of detected features follows >> OS : linux-gnu >> pthreads : yes (-lpthread) >> configure: Summary of miscellaneous features >> check : no (auto) >> fanotify : yes >> fdpassing : 1 >> IPv6 : yes >> configure: Summary of optional tools >> clamdtop : (auto) >> milter : yes (disabled) >> configure: Summary of engine performance features) >> release mode: yes >> jit : yes (auto) >> mempool : yes >> configure: Summary of engine detection features >> autoit_ea06 : yes >> bzip2 : ok >> zlib : /usr >> unrar : yes >> dmg and xar : no >> >> Am I missing a configure flag or third party library? >> >> Thanks in advance, >> >> - Rafael >> >> ---- >> scanii.com<http://scanii.com> - the web friendly malware scanner! >> _______________________________________________ >> http://lurker.clamav.net/list/clamav-devel.html >> Please submit your patches to our Bugzilla: http://bugs.clamav.net >> _______________________________________________ >> http://lurker.clamav.net/list/clamav-devel.html >> Please submit your patches to our Bugzilla: http://bugs.clamav.net >> _______________________________________________ >> http://lurker.clamav.net/list/clamav-devel.html >> Please submit your patches to our Bugzilla: http://bugs.clamav.net >> >> _______________________________________________ >> http://lurker.clamav.net/list/clamav-devel.html >> Please submit your patches to our Bugzilla: http://bugs.clamav.net >> >> _______________________________________________ >> http://lurker.clamav.net/list/clamav-devel.html >> Please submit your patches to our Bugzilla: http://bugs.clamav.net >> >> >> >> >> _______________________________________________ >> http://lurker.clamav.net/list/clamav-devel.html >> Please submit your patches to our Bugzilla: http://bugs.clamav.net >> >> _______________________________________________ >> http://lurker.clamav.net/list/clamav-devel.html >> Please submit your patches to our Bugzilla: http://bugs.clamav.net >> >> > > _______________________________________________ > http://lurker.clamav.net/list/clamav-devel.html > Please submit your patches to our Bugzilla: http://bugs.clamav.net _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net
