Add additional signatures to clamav

diff --git a/cookbooks/clamav/recipes/default.rb b/cookbooks/clamav/recipes/default.rb
index 08c873ee2e66352835c1a59605b01535059f845c..fe92becb5002b6f73a6f296633fd59ef938a7570 100644 (file)
--- a/cookbooks/clamav/recipes/default.rb
+++ b/cookbooks/clamav/recipes/default.rb
@@ -19,6 +19,14 @@
 
 package "clamav-daemon"
 package "clamav-freshclam"
+package "clamav-unofficial-sigs"
+
+template "/etc/clamav-unofficial-sigs.conf.d/50-chef.conf" do
+  source "clamav-unofficial-sigs.conf.erb"
+  owner "root"
+  group "root"
+  mode 0o644
+end
 
 service "clamav-daemon" do
   action [:enable, :start]

diff --git a/cookbooks/clamav/templates/default/clamav-unofficial-sigs.conf.erb b/cookbooks/clamav/templates/default/clamav-unofficial-sigs.conf.erb
new file mode 100644 (file)
index 0000000..f0c37f2
--- /dev/null
+++ b/cookbooks/clamav/templates/default/clamav-unofficial-sigs.conf.erb
@@ -0,0 +1,18 @@
+# DO NOT EDIT - This file is being maintained by Chef
+
+# Add Sanesecurity foxhole databases
+ss_dbs="
+   ${ss_dbs}
+   foxhole_all.cdb
+   foxhole_all.ndb
+   foxhole_filename.cdb
+   foxhole_generic.cdb
+   foxhole_js.cdb
+   foxhole_js.ndb
+"
+
+# Disable SecuriteInfo databases as the domain no longer exists
+si_dbs=""
+
+# Disable MalwarePatrol databases as they fail checksum validation
+mbl_dbs=""