Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Securite info not downloading all databases #407

Open
kprkpr opened this issue Mar 17, 2022 · 4 comments
Open

Securite info not downloading all databases #407

kprkpr opened this issue Mar 17, 2022 · 4 comments

Comments

@kprkpr
Copy link

kprkpr commented Mar 17, 2022

Hi!
I'm having problems with securiteinfo (With premium) download of databases..
image

And in /var/lib/.../dbs-si, doesn't appear anything more than the two files below:
image

I upload the master and user conf files
I don't know why doesn't download it...
config-files.zip

(In config files I found that uploaded with 0 hours wait to download databases, it was a test to force download, but with 1 hour the result is same)

@stevenhardey
Copy link

Not sure what the issue is per se, but if you remove /var/lib/clamav-unofficial-sigs/configs/last-si-update.txt you should be able to run the command again.

@ediazrod
Copy link

ediazrod commented Apr 29, 2022

Don't work...

The list of si include ..

securiteinfo.hdb
securiteinfo.ign2
javascript.ndb
spam_marketing.ndb
securiteinfohtml.hdb
securiteinfoascii.hdb
securiteinfoandroid.hdb
securiteinfopdf.hdb
securiteinfo0hour.hdb
securiteinfo.mdb
securiteinfo.yara
securiteinfo.pdb

This limits a lot the ratio of detection...

@Nitrocad
Copy link

Nitrocad commented Jun 24, 2022

This error is simple:
edit the master.conf and extend the declaration of the premium dbs at line 315 on dev version with the following:

securiteinfo.ign2|REQUIRED # Signature Whitelist
securiteinfo.hdb|LOW # Malwares younger than 3 years.
javascript.ndb|LOW # Malwares Javascript
spam_marketing.ndb|HIGH # Spam Marketing / spammer blacklist
securiteinfohtml.hdb|LOW # Malwares HTML
securiteinfoascii.hdb|LOW # Text file malwares (Perl or shell scripts, bat files, exploits, ...)
securiteinfoandroid.hdb|LOW # Malwares Java/Android Dalvik
securiteinfoold.hdb|LOW # Malwares older than 3 years.
securiteinfopdf.hdb|LOW # Malwares PDF

@melias3
Copy link

melias3 commented Jun 24, 2022

The securiteinfo_premium_dbs is squashing securiteinfo_dbs var

line 2442 (from master branch) if [ -n "$temp_db" ] ; then read -r -a securiteinfo_dbs <<< "$temp_db" fi

I locally substituted read by:

read -r -a securiteinfo_dbs <<< "$temp_db ${securiteinfo_dbs[@]}"

and worked

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants