Re: [Devil-linux-develop] clamav

[Bruce S. <bw...@ar...>]

> >>where should we place the clamav virus signatures?
> > 
> > Where is the default location for them?
> 
> /usr/share/clamav
> But you can easily set this in the config file.
> 
> >>The virus dbs could get to big to fit in /etc (for the floppy save), but 
> >>somewhere else it would always be outdated when a system boots.
> > 
> > How big are they now?
> 
> linux:/lfssystem/data # l virus*
> -rw-r--r--    1 root     root       140816 Sep  2 19:26 viruses.db
> -rw-r--r--    1 root     root        32940 Sep  2 19:26 viruses.db2
> 
> >>We could add an init script, which fetches the newest files if the user 
> >>wants to.
> > 
> > That sounds good.
> > 
> >>I personally would place the signatures somewhere under /var.
> > 
> > Isn't /etc/ & /var/ our only choices for directories not on the CD?
> 
> Actually yes.

They seem to me to be more of a data file (than a config file - /etc)
so, I'd put them in /var. 

A script, or cron job, that grabs the new sigs would be a good idea too.

My current virus scanner (RAV) on my employer's mail gateway comes 
with a cron job that checks for, and downloads, new sigs ever hour.

 - BS