libclamav versus clamd

I was just thinking about these two modes of operation new with release 0.3.5.

I saw a post in the samba mailing list about permission denied errors with
samba-vscan-clamav and clamd, and the FAQ is naturally to give access to the
files to the clamav user, or, and this is new, compile it with libclamav support
so that the scan will take place with the same permissions as the connected user.

Now, this user in the samba mailing list said that, after recompiling and using
samba-vscan-clamav with libclamav support, performance dropped terribly. I assume
this is because now every smbd process is scanning the files, each on of the
processes with its own copy of the virus database perhaps in memory.

So, would it be fair to conclude:
- use libclamav support if you prefer to have the scan to take place with the
privileges of the connecting user and have lots of RAM and cpu cycles to burn
- use clamd if you don't mind in having to change file system permissions
(perhaps via posix acls) so that the clamav user has broader privileges and can
read everything, and also if you require better performance

Comments?



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click