Re: [Devil-linux-develop] clamav

[Heiko Z. <he...@zu...>]

Bruce Smith wrote:
>>>>where should we place the clamav virus signatures?
>>>
>>>Where is the default location for them?
>>
>>/usr/share/clamav
>>But you can easily set this in the config file.
>>
>>
>>>>The virus dbs could get to big to fit in /etc (for the floppy save), but 
>>>>somewhere else it would always be outdated when a system boots.
>>>
>>>How big are they now?
>>
>>linux:/lfssystem/data # l virus*
>>-rw-r--r--    1 root     root       140816 Sep  2 19:26 viruses.db
>>-rw-r--r--    1 root     root        32940 Sep  2 19:26 viruses.db2
>>
>>
>>>>We could add an init script, which fetches the newest files if the user 
>>>>wants to.
>>>
>>>That sounds good.
>>>
>>>
>>>>I personally would place the signatures somewhere under /var.
>>>
>>>Isn't /etc/ & /var/ our only choices for directories not on the CD?
>>
>>Actually yes.
> 
> 
> They seem to me to be more of a data file (than a config file - /etc)
> so, I'd put them in /var. 

agreed

> A script, or cron job, that grabs the new sigs would be a good idea too.
> 
> My current virus scanner (RAV) on my employer's mail gateway comes 
> with a cron job that checks for, and downloads, new sigs ever hour.

I intend to provide the same.
I have postfix + sagator + spamassassin + clamav running, it works just 
fine. The only thing I need are the virus sig updates.

cya
   Heiko