samba-vscan INSTALL,1.28.2.20,1.28.2.21

Update of /cvsroot/openantivirus/samba-vscan
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv18508

Modified Files:
      Tag: VSCAN_0_3
	INSTALL 
Log Message:
updated the ClamAV installation/usage instructions


Index: INSTALL
===================================================================
RCS file: /cvsroot/openantivirus/samba-vscan/INSTALL,v
retrieving revision 1.28.2.20
retrieving revision 1.28.2.21
diff -u -d -r1.28.2.20 -r1.28.2.21
--- INSTALL	27 Jul 2004 08:59:50 -0000	1.28.2.20
+++ INSTALL	27 Jul 2004 09:29:16 -0000	1.28.2.21
@@ -667,7 +667,8 @@
 - Clam AntiVirus
   samba-vscan (clamav module) can be configured to use for the
   Clam AntiVirus daemon (clamd) or the ClamAV library (libclamav). 
-  Usage of clamd is default.
+  Usage of clamd is default. For a discussion about pro and cons please
+  see http://marc.theaimsgroup.com/?t=108550773300004&r=1&w=2
 
   Daemon:
   You need Clam AntiVirus Daemon from http://www.clamav.net/. As socket name
@@ -679,13 +680,16 @@
   "nobody" or as the user "xyz", when user "xyz" is connected to his home 
   directory). This could be a security risk, as now an attacker could pass 
   arbitrary commands to Clam AntiVirus Daemon, so we need a better
-  solution here ... 
+  solution here. Moreover, clamd must run as root in most cases to be able 
+  to read the files, which could lead to as security risk as well.
+ 
 
   libclamav:
   To use the ClamAV library instead, use the --with-clamav-lib switch for
   ./configure. Keep in mind, if vscan-clamav is build and linked for
   libclamav, you must rebuild the module if you decide to use clamd
-  instead.
+  instead. Please keep in mind, this could be a hugh performance
+  penalty.
 
 
 - Symantec AntiVirus Engine



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click