[sanesecurity] Re: local.ign updates

  • From: Paul Enlund <paul@xxxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Wed, 24 Jun 2009 19:24:05 +0100

At 16:33 23/06/2009 -0700, you wrote:
> I am seeing a problem with the update of local.ign with
> clamav-unofficial-sigs.sh  v3.5.3.
>
> I have as an entry "winnow.spam.ts.xmailer.hc.24". This signature has
> twice
> changed line number in winnow_spam_complete.ndb recently.
> However local.ign its copy in /usr/unofficial-dbs/configs/local.ign
> and the entry in /usr/unofficial-dbs/configs/monitor-ign.txt  all indicate
> line 170 were it should now be 172.
> The script is updating other entries correctly according to the logs but
> there are no references to  winnow.spam.ts.xmailer.hc.24 ever being
> updated
> in local.ign

Paul, I see the issue.  Would you be willing to test this updated script:

http://www.inetmsg.com/pub/test/clamav-unofficial-sigs.sh

If so, let me know if this resolves it for you and I add it to the next
update I release.  If anyone else would like to try it, as well, feel free
- and feedback would be welcomed.

Thanks,

Bill

Further to my last post changing line 1303
-       sig_new=`grep -h "$sig_hex" "$sig_file" 2>/dev/null`
+       sig_new=`grep  -h "$sig_hex" "$sig_file"| tr -d "\r" 2>/dev/null`

resolves the 2nd poiint I raised. This is on a Debian Sarge release.


Paul


Other related posts: