lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <002501c3821c$92f375f0$0100a8c0@p3600>
From: chows at ozemail.com.au (gregh)
Subject: Just when you thought Macafee stuff was safe!

----- Original Message ----- 
From: "Keith W. McCammon" <keith-list@...ammon.org>
To: "gregh" <chows@...mail.com.au>
Cc: <full-disclosure@...ts.netsys.com>
Sent: Wednesday, September 24, 2003 12:12 AM
Subject: Re: [Full-Disclosure] Just when you thought Macafee stuff was safe!


> Any chance this is caused by not excluding the spamkiller program
> directories and/or repositories within the Virusscan engine?
>

Now if it were only that easy! There is, currently, no way to do exclusions
with VSO.

> Never used VSO, but this is standard practice for these types of
> "overlapping" tools.  For example, directories associated with mail
> server engines, SMTP gateways, etc. must be excluded from the system
> engine to prevent duplicative scanning, as well as some more serious
> stability issues.
>

I understand you are correct and it IS normal not to have them overlap but
the current situation with VSO and Spamkiller, both from Macafee, is that
they DO overlap, unfortunately. I do actually have Macafee V6 and V5 sitting
around and set them up again to check out, not able to remember if
exclusions were limited to Recycle Bin or not. You CAN limit those versions
from scanning desired dirs (folders) but not VSO. I will add a disclaimer to
this - I have checked out VSO thoroughly and cannot FIND any way to exclude
a damned thing from the dirs to be scanned but I always work by the idea
that I am not 100% correct 100% of the time which is why I emailed Macafee
people to see what their response is. That response was "How does this
happen?" basically for now. More info (rehash of what I told them in the
first place) sent back and awaiting their response to that.

Greg.



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ