From: Tom Hughes <tom@compton.nu>
Date: Sun, 18 Dec 2016 11:33:31 +0000 (+0000)
Subject: Add additional signatures to clamav
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/aaf1d0a41db293d52892ab9768cd0c646248d8d3

Add additional signatures to clamav
---

diff --git a/cookbooks/clamav/recipes/default.rb b/cookbooks/clamav/recipes/default.rb
index 08c873ee2..fe92becb5 100644
--- a/cookbooks/clamav/recipes/default.rb
+++ b/cookbooks/clamav/recipes/default.rb
@@ -19,6 +19,14 @@
 
 package "clamav-daemon"
 package "clamav-freshclam"
+package "clamav-unofficial-sigs"
+
+template "/etc/clamav-unofficial-sigs.conf.d/50-chef.conf" do
+  source "clamav-unofficial-sigs.conf.erb"
+  owner "root"
+  group "root"
+  mode 0o644
+end
 
 service "clamav-daemon" do
   action [:enable, :start]
diff --git a/cookbooks/clamav/templates/default/clamav-unofficial-sigs.conf.erb b/cookbooks/clamav/templates/default/clamav-unofficial-sigs.conf.erb
new file mode 100644
index 000000000..f0c37f28e
--- /dev/null
+++ b/cookbooks/clamav/templates/default/clamav-unofficial-sigs.conf.erb
@@ -0,0 +1,18 @@
+# DO NOT EDIT - This file is being maintained by Chef
+
+# Add Sanesecurity foxhole databases
+ss_dbs="
+   ${ss_dbs}
+   foxhole_all.cdb
+   foxhole_all.ndb
+   foxhole_filename.cdb
+   foxhole_generic.cdb
+   foxhole_js.cdb
+   foxhole_js.ndb
+"
+
+# Disable SecuriteInfo databases as the domain no longer exists
+si_dbs=""
+
+# Disable MalwarePatrol databases as they fail checksum validation
+mbl_dbs=""