Merge pull request #478 from rfxn/2.0.1

LMD v2.0.1

Author: rfxn

.ca.def

@@ -0,0 +1,17 @@
+# VCS history (largest savings ~33MB)
+.git
+
+# Working/planning files (not source)
+.claude/
+CLAUDE.md
+PLAN*.md
+MEMORY.md
+AUDIT.md
+REGR.md
+audit-output/
+
+# Benchmark/dev scripts
+bench-*.sh
+
+# Reference documentation (dev-only)
+reference/

.dockerignore

@@ -0,0 +1,16 @@
+# Exclude dev-only artifacts from release tarballs (git archive, GitHub downloads)
+tests/              export-ignore
+docs/               export-ignore
+pkg/                export-ignore
+audit-output/       export-ignore
+work-output/        export-ignore
+.github/            export-ignore
+.rdf/               export-ignore
+reference/          export-ignore
+CLAUDE.md           export-ignore
+PLAN*.md            export-ignore
+AUDIT.md            export-ignore
+MEMORY.md           export-ignore
+HANDOFF.md          export-ignore
+FEATURE-*.md        export-ignore
+GEMINI-*.md         export-ignore

.gitattributes

@@ -0,0 +1,94 @@
+name: LMD Smoke Tests
+
+on:
+  push:
+    branches: [master, '2.*']
+  pull_request:
+    branches: [master, '2.*']
+
+jobs:
+  smoke-test:
+    uses: rfxn/batsman/.github/workflows/test.yml@v1.4.2
+    with:
+      project-name: lmd
+      os-matrix: '["debian12","centos6","centos7","rocky8","rocky9","rocky10","ubuntu2004","ubuntu2404"]'
+      timeout: 25
+      file-groups: 3
+      reports: true
+      docker-run-flags: '-e BATS_TEST_TIMEOUT=180'
+
+  yara-x:
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+      - uses: docker/setup-buildx-action@v3
+      - name: Build base image (debian12 for yara-x)
+        uses: docker/build-push-action@v6
+        with:
+          context: tests/infra
+          file: tests/infra/dockerfiles/Dockerfile.debian12
+          tags: lmd-base-debian12
+          load: true
+          cache-from: type=gha,scope=base-debian12
+          cache-to: type=gha,mode=max,scope=base-debian12
+      - name: Build yara-x image
+        run: |
+          docker build \
+            --build-arg BASE_IMAGE=lmd-base-debian12 \
+            -f tests/Dockerfile.yara-x \
+            -t lmd-test-yara-x .
+      - name: Run yara-x tests
+        run: |
+          mkdir -p "${{ runner.temp }}/reports"
+          docker run --rm \
+            -e BATS_TEST_TIMEOUT=180 \
+            -v "${{ runner.temp }}/reports:/reports" \
+            lmd-test-yara-x \
+            bats --formatter tap \
+            --report-formatter junit --output /reports \
+            /opt/tests/
+      - name: Upload yara-x test reports
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-reports-lmd-yara-x
+          path: ${{ runner.temp }}/reports/
+          retention-days: 14
+          if-no-files-found: ignore
+
+  uat:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+      - uses: docker/setup-buildx-action@v3
+      - name: Build base image
+        uses: docker/build-push-action@v6
+        with:
+          context: tests/infra
+          file: tests/infra/dockerfiles/Dockerfile.debian12
+          tags: lmd-base-debian12
+          load: true
+          cache-from: type=gha,scope=base-debian12
+          cache-to: type=gha,mode=max,scope=base-debian12
+      - name: Build test image
+        run: |
+          docker build \
+            --build-arg BASE_IMAGE=lmd-base-debian12 \
+            -f tests/Dockerfile \
+            -t lmd-test-debian12 .
+      - name: Run UAT scenarios
+        run: make -C tests uat
+      - name: Upload UAT results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: uat-results
+          path: /tmp/uat-output/
+          retention-days: 14
+          if-no-files-found: ignore

.github/workflows/smoke-test.yml

@@ -0,0 +1,3 @@
+[submodule "tests/infra"]
+	path = tests/infra
+	url = https://github.com/rfxn/batsman.git

.gitmodules

@@ -6,8 +6,8 @@ maxdepth           =>  scan_max_depth
 minfilesize        =>  scan_min_filesize
 maxfilesize        =>  scan_max_filesize
 hexdepth           =>  scan_hexdepth
-hex_fifo_scan      =>  scan_hexfifo
-hex_fifo_depth     =>  scan_hexfifo_depth
+hex_fifo_scan      =>  scan_hexfifo        =>  DEPRECATED (v2.0.1)
+hex_fifo_depth     =>  scan_hexfifo_depth  =>  scan_hexdepth (v2.0.1)
 clamav_scan        =>  scan_clamscan
 tmpdir_scan        =>  DELETED
 tmpdir_paths       =>  scan_tmpdir_paths
@@ -17,6 +17,8 @@ scan_nice          =>  scan_cpunice
 inotify_stime      =>  inotify_sleep
 inotify_webdir     =>  inotify_docroot
 inotify_nice       =>  inotify_cpunice
+inotify_verbose    =>  DELETED (v2.0.1)
+telegram_file_caption =>  DELETED (v2.0.1)
 def_verf           =>  sig_version_file
 defurl_ver         =>  sig_version_url
 def_ver            =>  sig_version

CHANGELOG

@@ -0,0 +1,34 @@
+# Contributing to linux-malware-detect
+
+## How to Contribute
+
+- **Bug reports**: Open a GitHub Issue with steps to reproduce
+- **Feature requests**: Open a GitHub Issue with use case and rationale
+- **Security vulnerabilities**: See [SECURITY.md](SECURITY.md)
+
+## Development Setup
+
+```bash
+git clone https://github.com/rfxn/linux-malware-detect.git
+cd linux-malware-detect
+# Project-specific setup instructions
+```
+
+## Code Standards
+
+- All shell scripts pass `bash -n` and `shellcheck`
+- Tests use the BATS framework: `make -C tests test`
+- Commit messages follow project conventions (see CHANGELOG for format)
+
+## Pull Requests
+
+1. Fork the repository
+2. Create a feature branch from the current release branch
+3. Make your changes with tests
+4. Ensure all tests pass: `make -C tests test`
+5. Submit a pull request with a clear description
+
+## License
+
+By contributing, you agree that your contributions will be licensed
+under the GNU GPL v2.