On Wed, Sep 25, 2013 at 10:57 AM, ScrumpyJack <scrumpyj...@me.com> wrote:
> I have been trying to scan RPM files with clamav without success. > clamscan file.rpm shows nothing. > If I unpack the cpio from the RPM and scan the extracted cpio, I get a > hit on a virus (as expected). > > Is clamav capable to "unpacking" RPM files to scan them? > > > > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml > ClamAV does not currently have that functionality, though as you found in your testing it does have support for cpio if you unpack the contents. We are working on a bunch of things for upcoming releases, but as always I cannot make any promises about future release contents or timetables. Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
