[Esd-l] Confused: Catching .wup Files?

John D. Hardin jhardin at impsec.org
Thu Jan 9 12:41:02 PST 2003


On Wed, 8 Jan 2003, Kevin Hemenway wrote:

> Does that go before all the other sanitizer stuff?
> My current setting (system wide) is:
> 
>       # don't check for windows executable magic
>       # strings or for microsoft office macros.
>       SECURITY_POISON_WINEXE=NO
> 
> Is NO an incorrect value here?

Yup. The variables are either "set" (any value) or "unset" (blank).

SECURITY_POISON_WINEXE is off by default, you've enabled it.

Either comment that line out, or whitelist the trusted senders right
after that as I suggested.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
-----------------------------------------------------------------------
   663 days until the Presidential Election



More information about the esd-l mailing list