rfxn/linux-malware-detect v2.0.1-rc2

on GitHub

v2.0.1 Release Candidate 2

Pre-release for testing. Full changelog in PR #478.

Packages

• maldet-2.0.1.tar.gz — source tarball (install via ./install.sh)
• maldet-2.0.1.zip — source zip

Changes Since RC1 (9 commits)

• [Fix] clamav_linksigs: guard mktemp failure to prevent cp into filesystem root
• [Fix] _json_escape_string FreeBSD + multi-newline correctness; post_scan_hook_timeout doc; deferred-item rationale comments
• [Fix] --test-alert digest: seed hook cursor before genalert (silent no-op on fresh cursor)
• [Fix] DEB: override_dh_fixperms to restore intended 640/750 modes
• [Fix] Vendored pkg_lib 1.0.8 → 1.0.9: pkg_config_merge multi-var fix
• [New] Tests: positive-path BATS coverage for --test-alert digest email
• [New] DEB package permission assertions (67 checks)

Full v2.0.1 Highlights

• Native batch scan engine (43x faster HEX+CSIG)
• SHA-256 hash scanning with hardware acceleration
• Compound signature (csig) engine
• Native YARA scanning
• Monitor mode supervisor redesign
• TSV session format + JSON reports
• HTML+text email alerts with template engine
• Hook scanning API with escalation and digest
• Scan lifecycle management (kill/pause/stop/continue)
• RPM and DEB packaging with FHS symlink farm
• 60+ bug fixes including security hardening