[pmg-devel] Spam scanning after virus is found

Dietmar Maurer dietmar at proxmox.com
Thu Apr 19 10:15:12 CEST 2018


> What about this code:

Thinks would be much easier if you send diffs ...
> 
>  # if quick mode is disabled then consider clamav heuristic
>     if (my $hit = $queue->{clamav_heuristic} && !$enable_quick_av_mode ) {
>         my $score = $queue->{clamav_heuristic_score};
>         my $descr = "ClamAV heuristic test: $hit";
>         my $rule = 'ClamAVHeuristics';
>         $sa_score += $score;
>         $list .= $list ? ",$rule" : $rule;
>         push @$sa_scores, { score => $score, rule => $rule, desc => $descr
> };
>     }
> 
>    # do not run SA if avast have found virus
>    if (  ($queue->{vinfo_avast} ||  $queue->{vinfo_clamav} ) &&
> $enable_quick_av_mode ) {
>         my $score = 5 ;
>         my $descr = "Virus Scanner Engines have found on or more viruses";
>         my $rule = 'AV_Virus_Found';
>         $sa_score += $score;
>         $list .= $list ? ",$rule" : $rule;
>         push @$sa_scores, { score => $score, rule => $rule, desc => $descr
> };

I don't really understand the purpose of this. It is a virus, so marking it
as SPAM makes no sense to me?



More information about the pmg-devel mailing list