Re: trophie and virus defs

> > > Also, is there a trophie virus def update script similar to
> > > sophos-ide-update for sophie?
> > 
> > Trend products usually have some way to update defs from  the  command
> > line. However, since I want the CPRs too (Controlled Pattern Releases)
> > I have started writing a sophos-ide-update.pl-like for Trend. It's not
> 
> I can't see a way to run a command-line update with ServerProtect for
> Linux

/opt/TrendMicro/SProtectLinux/SPLX.vsapiapp/splxmain -u

(this is documented in "man splxmain")

> - you can do it with a GUI, and with Dazuko and all that
> installed, but I'd prefer to just use Trophie with a
> trophie-ide-update.pl type thing.  If you can get that up and running, I
> would be greatly appreciative!  It can't be that hard; simply retrieve
> the latest libvsapi.so from
> http://www.trendmicro.com/download/engine.asp and vdef from
> http://www.trendmicro.com/download/pattern.asp.  Too bad Mark Martinec
> isn't in to Trophie. ;)
>

Yes, it seems simple at the beginning...then then one ends  up  facing
700+ lines of hairy Perl :-)
You can find the current state of my script at:
http://itsec.ait.ac.th/download/local/trend-update.pl

Keep in mind that this is VERY, VERY preliminary code. It hasn't  been
tested more than a few runs! I need at least  another  week  before  I
release something I feel comfortable with, with a README at least.
Read  the comments at the beginning of the file VERY carefully. Ask me
if you're confused before running it.
If  it  breaks your server, causes your microwave oven to melt down or
you  mother-in-law  to  come  for  lunch,  it's  not  my  fault (usual
disclaimer blah blah...)

It  needs  a  directory to keep stuff ($tmpdir). You can choose to use
only official VPN releases or also the CPRs ($wantcpr). You can choose
to update the engine as well or not  ($wanteng).  If  it  updates  the
engine, it needs the commands to stop and start Trophie.
For now, it can only determine Trophie's PID by reading its PID file.
I'll clone in Mark's code that can use other ways (lsof etc.) soon.

And  yes,  my Perl programming sucks. I know. It's only my second Perl
script larger than a screenful. I'm 100% sure that there are a million
ways to do this way better than  this  script  does.  That's  the  the
result  of  a  quick-and-dirty  thing  (I  needed  the CPR updates and
splxmain doesn't get them) growing beyond control :-)

Greets,
_Alain_