cxs

Changes:

• Updated POD to reflect –[no]fallback being disabled by default
• Changed default value of –Wsymlinkmax to 1000
• Changed default value of –Wsymlinksec to 10
• Added performance note about using –Wsymlink [script] to POD
• Modified cxswatch restart routine to run /etc/cxs/cxswatch.sh directly
• Modified cxswatch to more quickly detect restart requests on busy systems
• Exploit fingerprint definitions database additions

Changes:

• Memory usage improvements and general speedups
• Added the ability to use negative –options [-][], i.e. the default list of options is used apart from those listed when prefixed with a minus
• –[no]fallback now defaults to –nofallback due to performance concerns which should be noted before enabling the option
• Exploit fingerprint definitions database additions

Changes:

• Force cxs into a detached process if running –upgrade as a CRON job to fix upgrade hanging issue

Changes:

• Significant speedups in regex (up to 300% faster) and FP matching
• Exploit fingerprint definitions database additions

Changes:

• Code regression to prevent overloading update server during upgrades

Changes:

• New feature: –[no]fallback. If clamd produces an error or is unavailable after a scan starts, this option will attempt to use clamscan to scan files until clamd is available again. This option is enabled by default
• Additional minor updates to the POD documentation
• Modify cxsdaily.sh to fork jobs to prevent hanging on new installs
• Added timeout (5 mins) to cxs upgrade routine
• Improvements to –wttw [file]

Changes:

• Check file size against –sizemax [size] when using –wttw to ensure ignored files are not being submitted incorrectly
• Exploit fingerprint definitions database additions

Changes:

• UI Fixes and updates
• Fixed issue with default perl binary on non-cPanel servers
• Use raw UI plugin on DA servers when generating cxs commands/scans to overcome buffering issues
• Exploit fingerprint definitions database additions

Changes:

• Removed redundant v3 quarantine code
• Removed displaying “i” during scan if file ignored as it is not particularly helpful
• Updates to Piwik and ownCloud version detection
• Form design elements added
• Change to –sizemax [bytes] behaviour. In the past a file > [bytes] in size was ignored, now  the file will be scanned but only the initial [bytes] of the file will be scanned
• Added decoding of octal as well as hex encoded characters for PHP scripts
• Exploit fingerprint definitions database additions

Changes:

• Display “i” during scan if file ignored due to sizemax [bytes] being exceeded
• HTTP::Tiny upgraded to v0.039
• Translate ampersand for HTML output
• Fixed cxs UI not adding files to the ignore file after using the Ignore link
• Additional checks for ignore, xtra and new detections updates for cxs watch daemon to reload the relevant files if necessary
• Exploit fingerprint definitions database additions