clamav-unofficial-sigs

30 ottobre 2020 by Roberto Puzzanghera 0 commenti

  • Maggiori informazioni qui
  • Versione: 7.2.5

clamav-unofficial-sigs fornisce un modo semplice di scaricare, testare e aggiornare database verificati di terze parti forniti da Sanesecurity, FOXHOLE, OITC, Scamnailer, BOFHLAND, CRDF, Porcupine, Securiteinfo, MalwarePatrol, Yara-Rules Project, urlhaus, etc. Lo script genera e installa anche cron, logrotate, e i file man.

Scaricare lo script e i file di configurazione

cd /usr/local/sbin/
wget https://raw.githubusercontent.com/extremeshok/clamav-unofficial-sigs/master/clamav-unofficial-sigs.sh
chmod 755 /usr/local/sbin/clamav-unofficial-sigs.sh
mkdir -p /etc/clamav-unofficial-sigs/

cd /etc/clamav-unofficial-sigs/
wget https://raw.githubusercontent.com/extremeshok/clamav-unofficial-sigs/master/config/master.conf
wget https://raw.githubusercontent.com/extremeshok/clamav-unofficial-sigs/master/config/user.conf

Selezionare il file relativo al proprio sistema da https://github.com/extremeshok/clamav-unofficial-sigs/tree/master/config/ (modificare os_conf)

os_conf="os.slackware.conf"
wget "https://raw.githubusercontent.com/extremeshok/clamav-unofficial-sigs/master/config/os/${os_conf}"
ln -s ${os_conf} os.conf

user.conf sovrascrive os.conf e master.conf, os.conf sovrascrive master.conf. Naturalmente non è una buona idea operare le modifiche in master.conf.

Controllare il file os.*.conf e creare le seguenti righe se non già presenti. Tener presente che lo script clamdctl deve avere la funzione restart, in caso contrario aggiornarlo.

clamd_restart_opt="/usr/local/bin/clamdctl restart"
clamscan_bin="/usr/local/bin/clamscan"

Ora lanciare lo script come root

/usr/local/sbin/clamav-unofficial-sigs.sh --force

Installare logrotate e i file man

/usr/local/sbin/clamav-unofficial-sigs.sh --install-logrotate
/usr/local/sbin/clamav-unofficial-sigs.sh --install-man

Installare i file di configurazione. Questo è per coloro che usano cron

/usr/local/sbin/clamav-unofficial-sigs.sh --install-cron

e questo per gli utenti con systemd

mkdir -p /etc/systemd/system/
wget https://raw.githubusercontent.com/extremeshok/clamav-unofficial-sigs/master/systemd/clamav-unofficial-sigs.service -O /etc/systemd/system/clamav-unofficial-sigs.service
wget https://raw.githubusercontent.com/extremeshok/clamav-unofficial-sigs/master/systemd/clamav-unofficial-sigs.timer -O /etc/systemd/system/clamav-unofficial-sigs.timer

systemctl enable clamav-unofficial-sigs.service
systemctl enable clamav-unofficial-sigs.timer
systemctl start clamav-unofficial-sigs.timer

Lanciare il seguente comando per mostrare a video quali database sono stati caricati da clamave controllare che non vi siano errori. Se la lista contiene i nuovi database l'installazione è avvenuta con successo.

clamscan --debug 2>&1 /dev/null | grep "loaded"

 

Aggiornare

Per controllare la versione installata:

# /usr/local/sbin/clamav-unofficial-sigs.sh --version 
################################################################################ 
eXtremeSHOK.com ClamAV Unofficial Signature Updater 
Version: v7.2.5 (2021-03-20) 
Required Configuration Version: v96 
Copyright (c) Adrian Jon Kriel :: admin@extremeshok.com 
################################################################################

Lanciare l'aggiornamento:

# clamav-unofficial-sigs.sh --upgrade 
################################################################################ 
eXtremeSHOK.com ClamAV Unofficial Signature Updater 
Version: v7.2.5 (2021-03-20) 
Required Configuration Version: v96 
Copyright (c) Adrian Jon Kriel :: admin@extremeshok.com 
################################################################################ 
Loading config: /etc/clamav-unofficial-sigs/master.conf 
Loading config: /etc/clamav-unofficial-sigs/os.slackware.conf 
Loading config: /etc/clamav-unofficial-sigs/user.conf 
Checking for updates ...

Aggiungi un commento