Package Details: maldet 2.0.1-1

Git Clone URL: https://aur.archlinux.org/maldet.git (read-only, click to copy)
Package Base: maldet
Description: Linux malware scanner designed around threats faced in shared host environments
Upstream URL: https://www.rfxn.com/projects/linux-malware-detect/
Licenses: GPL2
Provides: linux-malware-detect
Submitter: mrqwer88
Maintainer: AlphaJack (graysky)
Last Packager: AlphaJack
Votes: 29
Popularity: 0.34
First Submitted: 2012-05-03 12:41 (UTC)
Last Updated: 2026-05-25 10:33 (UTC)

Latest Comments

1 2 3 4 Next › Last »

graysky commented on 2026-05-25 17:29 (UTC)

You can omit the gzip step for the man pages. makepkg does it.

graysky commented on 2026-05-25 17:25 (UTC)

Thanks, that did the trick.

AlphaJack commented on 2026-05-25 11:56 (UTC)

@graysky could you should set scan_ignore_root="0" in /etc/maldet/maldet.conf to scan root-owned paths like /usr/bin.

Keep in mind that paths in scan_tmpdir_paths get appended to every scan, so if you don't enable the option above but have files in /tmp, you will be ignoring /usr/bin and scanning /tmp with your command.

graysky commented on 2026-05-25 11:29 (UTC)

Thanks for the update. Are you sure the sed magic is correct? I cannot get maldet to build a file list:

# maldet -a /usr/bin/
Linux Malware Detect v2.0.1
            (C) 2002-2026, R-fx Networks <proj@rfxn.com>
            (C) 2026, Ryan MacDonald <ryan@rfxn.com>
This program may be freely redistributed under the terms of the GNU GPL v2

maldet(1841): {scan} compiling 45,093 signatures (hash hex csig yara)...
maldet(1841): {scan} signatures ready in 0s: 45,093 (42,634 SHA | 2,373 HEX | 86 CSIG | 3,706 YARA(no engine) | 0 USER)
maldet(1841): {scan} building file list for /usr/bin/, this might take awhile...
maldet(1841): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
maldet(1841): {scan} scan returned empty file list; check that path exists and contains files in scope of configuration.

garyghost commented on 2026-01-19 23:21 (UTC)

It might be a false detection but I want to raise awareness or at least confirm that it is or isn't legit. Upon downloading this package I found

[2026-01-19WARN l:scan] threat: /home/ga/Downloads/maldetect-current/maldetect-1.6.6/files/sigs/rfxn.yara ("Php.Exploit.C99-27") [2026-01-19WARN l:scan] threat: /home/ga/Downloads/maldetect-current.tar.gz ("Php.Exploit.C99-27")

AlphaJack commented on 2023-04-28 12:43 (UTC)

I don't know why the ed editor would be required, but it solved the issue for me so I added it as a dependency. You should also have it installed as I added it as a dependency for 1.6.5, so I don't know why it is throwing an error to you.

greenhandzdl commented on 2023-04-28 12:26 (UTC)

How to fix this issue?

FatildaIV commented on 2023-04-15 21:47 (UTC)

lib32-glibc dependency is not specified

AlphaJack commented on 2022-02-02 19:44 (UTC)

Thank you, fixed

afader commented on 2022-02-02 17:00 (UTC)

Latest change to package won't build

==> Entering fakeroot environment...
==> Starting package()...
rm: cannot remove '/home/akf/.cache/yay/maldet/pkg/maldet/usr/share/maldet/maldet.1.gz': No such file or directory
==> ERROR: A failure occurred in package().
    Aborting...
 -> error making: maldet

1 2 3 4 Next › Last »