Re: Re: Warning: Sophie might ignore subdirectories under certain circumstances

David Birnbaum <[email protected]> Thu, 22 Jul 2004 12:14:53 -0400 (EDT)
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
We're using it a whole lot....  I wish we had someone here capable of 
maintaining it.  We'd even be willing to chip in some "support" (cash? 
CDs?  martinis?)

David.

-----

On Thu, 22 Jul 2004, L. Jankok wrote:

> is sophie still worth using now it is not being
> mantained anymore ?.
>
> On  0, Dirk Kraemer <[email protected]> wrote:
> :Hi all!
> :
> :We noticed following problem with sophie:
> :
> :  OS: SuSE Linux 9.0, 9.1
> :  Sophie Version: sophie-3.04rc2
> :  Filesystem: ReiserFS
> :
> :Within above environment, if we do a
> :
> :  $ mkdir -p /tmp/dir1/dir2/dir3
> :  $ stat /tmp/dir1/dir2
> :
> :we get a '0' for number of allocated
> :blocks for /tmp/dir1/dir2:
> :
> :  File: »/tmp/dir1/dir2«
> :  Size: 72              Blocks: 0          IO Block: 4096   ...
> :  ...
> :
> :But that number seems to be used by sophie
> :to decide if a subdirectory has to be scanned.
> :Within sophie_scandir.c we find at line 86:
> :
> :   if (filestat.st_blocks > 0)
> :      if ((sophie_scandir(path)) > 0) {
> :           closedir(dirpt);
> :           return(1); /* virus found */
> :      }
> :
> :So if this values is 0, sophie does not recursively
> :scan subdirectories, does not find any viruses within.
> :
> :This effect does not occur when using ext2, ext3 with
> :SuSE or any of ext2,ext3,reiserfs with Debian Sarge.
> :So maybe check yourself if your system might have
> :the same problem.
> :
> :If you comment out the (filestat.st_blocks > 0)
> :check, sophie scans subdirectories again. However,
> :does someone know into which problems we might run
> :now?
> :
> :Regards
> :
> :Dirk
> :
> :_______________________________________________
> :vtools mailing list
> :[email protected]
> :http://www.vanja.com/list/listinfo.cgi/vtools
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
>

_______________________________________________
vtools mailing list
[email protected]
http://www.vanja.com/list/listinfo.cgi/vtools