On 3/29/15 12:08 AM, Al Varnell wrote:
On Sat, Mar 28, 2015 at 09:50 PM, Dennis Peterson wrote:
It should be possible to use cpio to extract the contents to a stream and feed
that into the ClamAV engine
OS X does include cpio but I have been unsuccessful in getting it to do anything with a .dmg.
cpio -h tells me it’s "bsdcpio 2.8.3 -- lib archive 2.8.3”, but I also see evidence that
it’s already included from clamav-0.98.6 source’s libclamav directory. I suspect that means
it’s what is used to extract "tar, pax, cpio , zip, jar, ar, and ISO 9660 cdrom
images" (from the man).
I think we’re going to have to wait for somebody to tell us exactly how “Dmg
scanning was added."
-Al-
That's because I'm an idiot. I meant dd, not cpio. But that won't work either
because clamscan can't read raw partitions. Or if it does I haven't figured it
out. This was also hashed out last year at
http://lurker.clamav.net/message/20140210.230519.1b53a3a9.en.html
dp
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
