Line 54: |
Line 54: |
| |- | | |- |
| |securiteinfo_premium | | |securiteinfo_premium |
− | |yes | + | |no |
| |yes,no | | |yes,no |
| | | | | |
Line 126: |
Line 126: |
| |yes | | |yes |
| |yes,no | | |yes,no |
| + | |Enables yararules in the various databases, automatically |
| + | |- |
| + | |enable_yararules |
| + | |no |
| + | |yes,no |
| + | |Enables yararules in the various databases, automatically |
| + | |- |
| + | |default_dbs_rating |
| + | |MEDIUM |
| + | |LOW, MEDIUM, HIGH, DISABLE |
| + | | |
| + | |- |
| + | |linuxmalwaredetect_dbs_rating |
| + | | |
| + | |<nowiki>LOW | MEDIUM | HIGH | DISABLE</nowiki> |
| + | |These ratings will override the global rating for the specific database |
| + | |- |
| + | |sanesecurity_dbs_rating |
| + | | |
| + | |<nowiki>LOW | MEDIUM | HIGH | DISABLE</nowiki> |
| + | |These ratings will override the global rating for the specific database |
| + | |- |
| + | |securiteinfo_dbs_rating |
| + | | |
| + | |<nowiki>LOW | MEDIUM | HIGH | DISABLE</nowiki> |
| + | |These ratings will override the global rating for the specific database |
| + | |- |
| + | |urlhaus_dbs_rating |
| + | | |
| + | |<nowiki>LOW | MEDIUM | HIGH | DISABLE</nowiki> |
| + | |These ratings will override the global rating for the specific database |
| + | |- |
| + | |yararulesproject_dbs_rating |
| + | | |
| + | |<nowiki>LOW | MEDIUM | HIGH | DISABLE</nowiki> |
| + | |These ratings will override the global rating for the specific database |
| + | |- |
| + | | |
| + | | |
| + | | |
| | | | | |
| |} | | |} |
Line 134: |
Line 174: |
| expand-template /etc/clamav-unofficial-sigs/os.conf | | expand-template /etc/clamav-unofficial-sigs/os.conf |
| signal-event clamav-update | | signal-event clamav-update |
| + | === Known issue === |
| + | If you want to disable a single database from one provider, there are two way to do it : either this is known database that have a high risk of false positive then you can set the rating for this provider lower : |
| + | |
| + | For securite info spam_marketing.ndb is set as HIGH in master.conf. If you set default_dbs_rating to MEDIUM/LOW or securiteinfo_dbs_rating to MEDIUM/LOW this db will be excluded. |
| + | |
| + | Let's say that the db bothering you is provided by securite info which also provides other db that are important for you, you could edit the master.conf manually and either comment out the line with the db name or increase the level of it. However, the file could be updated by the main script and you might lost the changes. |
| + | |
| === Bugs === | | === Bugs === |
| Please raise bugs under the SME-Contribs section in {{BugzillaFileBug|product=|component=|title=bugzilla}}and select the smeserver-clamav-unofficial-sigs component or use {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-clamav-unofficial-sigs|title=this link}}. | | Please raise bugs under the SME-Contribs section in {{BugzillaFileBug|product=|component=|title=bugzilla}}and select the smeserver-clamav-unofficial-sigs component or use {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-clamav-unofficial-sigs|title=this link}}. |