Re: libclamav versus clamd

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigDE0BD53F090070CCC43AA52E
Content-Type: multipart/mixed;
 boundary="------------050303000003010506050607"

This is a multi-part message in MIME format.
--------------050303000003010506050607
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

Rainer Link wrote:
> Andreas wrote:
> 
>> Any plans to have this runtime configurable at some point? libclamav 
>> vs clamd?
> 
> Not planned yet. vscan-clamav must be linked against libclamav to use 
> it. In the clamd case this is not needed. So the current approach is: 
> re-build the module if you switch between libclamav/clamd.
> 
>> I also thought a little about using the STREAM clamd command, but it is
>> marked as obsolete and I'm not sure if performance wouldn't be worse.
> 
> STREAM means don't pass the file name to clamd but send the contents of 
> the file, right? Hum, this would also mean that clamd must not run on 
> the same maschine as Samba, but I'm afraid the performance would be worse.
> 
> So, in short: clamd must run as root, I'm afraid (with read/write 
> permissions for everyone of the socket). POSIX ACLs may help here, but I 
> never really played with attr, setfattr and alike.

STREAM looks like POST/FILTER from ScannerDaemon. My understanding of
the code is that the algorithm supports this scheme now, but further
improvements, e.g. heuristics, need random access to the file. So the
only solution would be to write it into a file and then scan it.

-- 
Kurt Huwig             iKu Systemhaus AG        http://www.iku-ag.de/
Vorstand               Am Römerkastell 4        Telefon 0681/96751-0
                         66121 Saarbrücken        Telefax 0681/96751-66
GnuPG 1024D/99DD9468 64B1 0C5B 82BC E16E 8940  EB6D 4C32 F908 99DD 9468


--------------050303000003010506050607
Content-Type: application/pgp-signature;
 name="signature.asc"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
 filename="signature.asc"

LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjEuMi4zIChH
TlUvTGludXgpCkNvbW1lbnQ6IFVzaW5nIEdudVBHIHdpdGggTW96aWxsYSAtIGh0dHA6Ly9l
bmlnbWFpbC5tb3pkZXYub3JnCgppRDhEQlFGQXRGVUNUREw1Q0puZGxHZ1JBbWZTQUtEYm8v
eENwYTQ1aGM2UUVzZWVlL0VGdHhpeHNBQ2d3dEdCCmpxN3hJdWg0TU1rVFFmVU9Rc3pGT1Vr
PQo9dDI2OQotLS0tLUVORCBQR1AgU0lHTkFUVVJFLS0tLS0KCg==
--------------050303000003010506050607--

--------------enigDE0BD53F090070CCC43AA52E
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAtFUWTDL5CJndlGgRAoOpAKCRTwMW2Yfyf8EilxHbiEdfh3BpOQCgpT3T
jiV6ssNS+srC44ViUDxj7VY=
=qHGi
-----END PGP SIGNATURE-----

--------------enigDE0BD53F090070CCC43AA52E--


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click