search

scVENUS / PeekabooAV

Peekaboo Extended Email Attachment Behavior Observation Owl
https://peekabooav.de
GNU General Public License v3.0
66 stars 20 forks source link

add exceptions for pEp attachments #192

Closed yoshimo closed 2 years ago

yoshimo commented 3 years ago

whitelist these filetypes to avoid spinning up a vm for common sync messages on top of pgp.

Jack28 commented 3 years ago

Hi yoshimo, thank you for your changes. Can you add tests and test-data?

Thanks Felix

Jack28 commented 3 years ago

Or can you send me one or more emails with the corresponding attachments to felix(at)peekabooav.de so we have them right where we can see how Peekaboo processes them?

Jack28 commented 2 years ago

Hi yoshimo, did you send me that email, it has 3 attachments for me

>>> file --mime sync.pEp pEpkey.asc electronic_signature.asc
sync.pEp:                 application/octet-stream; charset=binary
pEpkey.asc:               application/pgp-keys; charset=us-ascii
electronic_signature.asc: application/pgp-encrypted; charset=us-ascii

If you wanted to exclude these files from scanning I recommend an expression rule in the style we already use for gpg and smime using filename and type.

Jack28 commented 2 years ago

I think we can close this for now, feel free to reopen