Andreas Schulze skrev den 2013-11-05 14:20:
we use clamav with local created pattern.
Detected content is marked with "virusname.UNOFFICIAL".
That confuses some people here.
clamav is opensource so patch will be welcommed :=)
I think about a local patch to clamav to change the string UNOFFICIAL.
Would it make sense to make the extension string configurable via
clamd.conf?
Did somone already implemented such feature?
would make more sense to have documented how to build own cvd signature
files, but the abouve would be nice aswell, i think it would be nice to
see something like
<virusname>.<category>.<databasefile>.<domain> in that format as
standard, that would also help out lowmem sites that does not want to
use full signatures in main.cvd
pua catagoring it more could extend this
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml
