Hello, we are creating signatures mostly using procedures described in ~clamav-src/docs/signatures.pdf The resulting files *.hdb, *ign2, *db are copied to a clamav datadir and used by clamav. Thats fine.
As far as I understand I could combine these files to a custom CVD. For that reason I tried this procedure: $ install -d /tmp/testing && cd /tmp/testing $ echo testing > COPYING $ sigtool --md5 /etc/issue > issue.hdb $ cat issue.hdb 174fd67875b42f41746ea8ae50f9b4b7:28:issue $ install -d out $ SIGNDUSER=me sigtool --unsigned --datadir=. --build out/db.cud --max-bad-sigs 0 --cvd-version 1 WARNING: build: Signatures in out/db db files: 0, loaded by libclamav: 1 LibClamAV Error: cl_cvdhead: Can't open file ./out/db.cud Version number: Total sigs: 1 New sigs: 1 Created out/db.cud $ sigtool --unsigned --info out/db.cud File: out/db.cud Build time: 02 Jun 2014 13:20 +0200 Version: 1 Signatures: 1 Functionality level: 77 Builder: me Verification: Unsigned container ... looks good, but I cannot use the file: $ clamscan --database=out/ /etc/issue LibClamAV Error: cli_tgzload: Slash separators are not allowed in CVD LibClamAV Error: Can't load out/db.cud: Malformed database LibClamAV Error: cli_loaddbdir(): error loading database out/db.cud ERROR: Malformed database ----------- SCAN SUMMARY ----------- Known viruses: 0 Engine version: 0.98.4-rc1 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 0.002 sec (0 m 0 s) what's wrong here ???? Btw: could someone explain the difference between cvd, cld and cud ? Thanks, Andreas -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
