Browse code
Updates to documentation for 0.98.1
Steven Morgan authored on 2014/01/08 04:42:31Showing 4 changed files
| ... | ... |
@@ -3,6 +3,7 @@ The ClamAV Team - http://www.clamav.net/team |
| 3 | 3 |
Joel Esler <jesler at*sourcefire.com> |
| 4 | 4 |
Nigel Houghton <nhoughton at*sourcefire.com> |
| 5 | 5 |
Tom Judge <tjudge at*sourcefire.com> |
| 6 |
+Kevin Lin <klin at*sourcefire.com> |
|
| 6 | 7 |
Steve Morgan <smorgan at*sourcefire.com> |
| 7 | 8 |
Matt Olney <molney at*sourcefire.com> |
| 8 | 9 |
Ryan Pentney <rpentney at*sourcefire.com> |
| ... | ... |
@@ -1,59 +1,28 @@ |
| 1 |
-0.98 |
|
| 1 |
+0.98.1 |
|
| 2 | 2 |
------ |
| 3 |
+ClamAV 0.98.1 provides improved support of Mac OS X platform, support for new file types, and |
|
| 4 |
+quality improvements. These include: |
|
| 3 | 5 |
|
| 4 |
-ClamAV 0.98 includes many new features, across all the different components |
|
| 5 |
-of ClamAV. There are new scanning options, extensions to the libclamav API, |
|
| 6 |
-support for additional filetypes, and internal upgrades. |
|
| 7 |
- |
|
| 8 |
- - Signature improvements: New signature targets have been added for |
|
| 9 |
- PDF files, Flash files and Java class files. (NOTE: Java archive files |
|
| 10 |
- (JAR) are not part of the Java target.) Hash signatures can now specify |
|
| 11 |
- a '*' (wildcard) size if the size is unknown. Using wildcard size |
|
| 12 |
- requires setting the minimum engine FLEVEL to avoid backwards |
|
| 13 |
- compatibility issues. For more details read the ClamAV Signatures |
|
| 14 |
- guide. |
|
| 15 |
- |
|
| 16 |
- - Scanning enhancements: New filetypes can be unpacked and scanned, |
|
| 17 |
- including ISO9660, Flash, and self-extracting 7z files. PDF |
|
| 18 |
- handling is now more robust and better handles encrypted PDF files. |
|
| 19 |
- |
|
| 20 |
- - Authenticode: ClamAV is now aware of the certificate chains when |
|
| 21 |
- scanning signed PE files. When the database contains signatures for |
|
| 22 |
- trusted root certificate authorities, the engine can whitelist |
|
| 23 |
- PE files with a valid signature. The same database file can also |
|
| 24 |
- include known compromised certificates to be rejected! This |
|
| 25 |
- feature can also be disabled in clamd.conf (DisableCertCheck) or |
|
| 26 |
- the command-line (nocerts). |
|
| 27 |
- |
|
| 28 |
- - New options: Several new options for clamscan and clamd have been |
|
| 29 |
- added. For example, ClamAV can be set to print infected files and |
|
| 30 |
- error files, and suppress printing OK results. This can be helpful |
|
| 31 |
- when scanning large numbers of files. This new option is "-o" for |
|
| 32 |
- clamscan and "LogClean" for clamd. Check clamd.conf or the clamscan |
|
| 33 |
- help message for specific details. |
|
| 34 |
- |
|
| 35 |
- - New callbacks added to the API: The libclamav API has additional hooks |
|
| 36 |
- for developers to use when wrapping ClamAV scanning. These function |
|
| 37 |
- types are prefixed with "clcb_" and allow developers to add logic at |
|
| 38 |
- certain steps of the scanning process without directly modifying the |
|
| 39 |
- library. For more details refer to the clamav.h file. |
|
| 40 |
- |
|
| 41 |
- - More configurable limits: Several hardcoded values are now configurable |
|
| 42 |
- parameters, providing more options for tuning the engine to match your |
|
| 43 |
- needs. Check clamd.conf or the clamscan help message for specific |
|
| 44 |
- details. |
|
| 45 |
- |
|
| 46 |
- - Performance improvements: This release furthers the use of memory maps |
|
| 47 |
- during scanning and unpacking, continuing the conversion started in |
|
| 48 |
- prior releases. Complex math functions have been switched from |
|
| 49 |
- libtommath to tomsfastmath functions. The A/C matcher code has also |
|
| 50 |
- been optimized to provide a speed boost. |
|
| 51 |
- |
|
| 52 |
- - Support for on-access scanning using Clamuko/Dazuko has been replaced |
|
| 53 |
- with fanotify. Accordingly, clamd.conf settings related to on-access |
|
| 54 |
- scanning have had Clamuko removed from the name. Clamuko-specific |
|
| 55 |
- configuration items have been marked deprecated and should no longer |
|
| 56 |
- be used. |
|
| 6 |
+ - Extraction, decompression, and scanning of files within Apple Disk Image (DMG) format. |
|
| 7 |
+ |
|
| 8 |
+ - Extraction, decompression, and scanning of files within Extensible Archive (XAR) format. |
|
| 9 |
+ XAR format is commonly used for software packaging, such as PKG and RPM, as well as |
|
| 10 |
+ general archival. |
|
| 11 |
+ |
|
| 12 |
+ - Decompression and scanning of files in "Xz" compression format. |
|
| 13 |
+ |
|
| 14 |
+ - Recognition of Open Office XML formats. |
|
| 15 |
+ |
|
| 16 |
+ - Improvements and fixes to extraction and scanning of ole formats. |
|
| 17 |
+ |
|
| 18 |
+ - Option to force all scanned data to disk. This impacts only a few file types where |
|
| 19 |
+ some embedded content is normally scanned in memory. Enabling this option |
|
| 20 |
+ ensures that a file descriptor exists when callback functions are used, at a small |
|
| 21 |
+ performance cost. This should only be needed when callback functions are used |
|
| 22 |
+ that need file access. |
|
| 23 |
+ |
|
| 24 |
+ - Various improvements to ClamAV configuration, support of third party libraries, |
|
| 25 |
+ and unit tests. |
|
| 57 | 26 |
|
| 58 | 27 |
There are also fixes for other minor issues and code quality changes. Please |
| 59 | 28 |
see the ChangeLog file for details. |
| ... | ... |
@@ -2,6 +2,32 @@ Note: This README/NEWS file refers to the source tarball. Some things described |
| 2 | 2 |
here may not be available in binary packages. |
| 3 | 3 |
-- |
| 4 | 4 |
|
| 5 |
+0.98.1 |
|
| 6 |
+------ |
|
| 7 |
+ClamAV 0.98.1 provides improved support of Mac OS X platform, support for new file types, and |
|
| 8 |
+quality improvements. These include: |
|
| 9 |
+ |
|
| 10 |
+ - Extraction, decompression, and scanning of files within Apple Disk Image (DMG) format. |
|
| 11 |
+ |
|
| 12 |
+ - Extraction, decompression, and scanning of files within Extensible Archive (XAR) format. |
|
| 13 |
+ XAR format is commonly used for software packaging, such as PKG and RPM, as well as |
|
| 14 |
+ general archival. |
|
| 15 |
+ |
|
| 16 |
+ - Decompression and scanning of files in "Xz" compression format. |
|
| 17 |
+ |
|
| 18 |
+ - Recognition of Open Office XML formats. |
|
| 19 |
+ |
|
| 20 |
+ - Improvements and fixes to extraction and scanning of ole formats. |
|
| 21 |
+ |
|
| 22 |
+ - Option to force all scanned data to disk. This impacts only a few file types where |
|
| 23 |
+ some embedded content is normally scanned in memory. Enabling this option |
|
| 24 |
+ ensures that a file descriptor exists when callback functions are used, at a small |
|
| 25 |
+ performance cost. This should only be needed when callback functions are used |
|
| 26 |
+ that need file access. |
|
| 27 |
+ |
|
| 28 |
+ - Various improvements to ClamAV configuration, support of third party libraries, |
|
| 29 |
+ and unit tests. |
|
| 30 |
+ |
|
| 5 | 31 |
0.98 |
| 6 | 32 |
------ |
| 7 | 33 |
|