From 8d20a24cf53b7837b253a037268597d03743a557 Mon Sep 17 00:00:00 2001 From: Ashkan Jazayeri Date: Tue, 5 Jun 2018 22:31:14 +0430 Subject: [PATCH] yara: add dotnet module Dotnet module added as a compile time option. The dotnet module allows you to create more fine-grained rules for .NET files by using attributes and features of the .NET file format. http://yara.readthedocs.io/en/latest/modules/dotnet.html Signed-off-by: Ashkan Jazayeri --- utils/yara/Config.in | 7 +++++++ utils/yara/Makefile | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/utils/yara/Config.in b/utils/yara/Config.in index 76e83db6b..328ce4c94 100644 --- a/utils/yara/Config.in +++ b/utils/yara/Config.in @@ -12,5 +12,12 @@ if PACKAGE_yara default n help Create rules based on behavioral info generated by a Cuckoo sandbox + + config YARA_module_dotnet + bool "Dotnet module" + default n + help + The dotnet module allows you to create more fine-grained rules + for .NET files by using attributes and features of the .NET file format endif diff --git a/utils/yara/Makefile b/utils/yara/Makefile index 709d14728..1e908d218 100644 --- a/utils/yara/Makefile +++ b/utils/yara/Makefile @@ -41,7 +41,7 @@ define Package/yara/description endef CONFIGURE_ARGS += \ - --disable-dotnet \ + $(if $(CONFIG_YARA_module_dotnet),--enable,--disable)-dotnet \ $(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \ $(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo