search

Cisco-Talos / cvdupdate

ClamAV Private Database Mirror Updater Tool
Apache License 2.0
93 stars 35 forks source link

Tamper check for daily/main/bytecode DNS setting #22

Closed micahsnyder closed 3 years ago

micahsnyder commented 3 years ago

CVD-Update allows for third party databases or additional databases to be updated with version checks performed purely through HTTP. For daily, main, and bytecode these MUST use DNS though, to save bandwidth.

This commit adds a tamper check to make sure that updates to daily, main, and bytecode when using database.clamav.net use DNS for the version check.

micahsnyder commented 3 years ago

Tested on linux and windows by setting the "DNS field" config setting to 0 and verifying that the update skipped those databases and returned a non-zero exit code.