Re: libclamav versus clamd

Rainer Link <[email protected]> Wed, 26 May 2004 00:12:50 +0200
Newsgroups gmane.comp.security.virus.openantivirus.general
Organization http://www.reniar.de/
Message-ID <[email protected]>

Andreas wrote:
> Any plans to have this runtime configurable at some point? libclamav vs clamd?

Not planned yet. vscan-clamav must be linked against libclamav to use 
it. In the clamd case this is not needed. So the current approach is: 
re-build the module if you switch between libclamav/clamd.

> 
> I also thought a little about using the STREAM clamd command, but it is
> marked as obsolete and I'm not sure if performance wouldn't be worse.

STREAM means don't pass the file name to clamd but send the contents of 
the file, right? Hum, this would also mean that clamd must not run on 
the same maschine as Samba, but I'm afraid the performance would be worse.

So, in short: clamd must run as root, I'm afraid (with read/write 
permissions for everyone of the socket). POSIX ACLs may help here, but I 
never really played with attr, setfattr and alike.

best regards
Rainer Link



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click