Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package clamav for openSUSE:Factory checked in at 2021-04-10 15:27:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/clamav (Old) and /work/SRC/openSUSE:Factory/.clamav.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "clamav" Sat Apr 10 15:27:51 2021 rev:112 rq:884035 version:0.103.2 Changes: -------- --- /work/SRC/openSUSE:Factory/clamav/clamav.changes 2021-02-09 21:17:35.098864803 +0100 +++ /work/SRC/openSUSE:Factory/.clamav.new.2401/clamav.changes 2021-04-10 15:28:57.810490410 +0200 @@ -1,0 +2,58 @@ +Fri Apr 9 10:33:04 UTC 2021 - Reinhard Max <[email protected]> + +- Use a split-provides for clamav-milter instead of recommending it. + +------------------------------------------------------------------- +Wed Apr 7 20:05:49 UTC 2021 - Arjen de Korte <[email protected]> + +- Update to 0.103.2 + * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite + loop. Affects 0.103.0 and 0.103.1 only. + * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read; + possible crash. Affects 0.103.0 and 0.103.1 only. + * CVE-2021-1405, bsc#1184534: Fix for mail parser + NULL-dereference crash. Affects 0.103.1 and prior. + * Fix possible memory leak in PNG parser. + * Fix ClamOnAcc scan on file-creation race condition so files are + scanned after their contents are written. + * FreshClam: Deprecate the SafeBrowsing config option. The + SafeBrowsing option will no longer do anything. + * For more details, see our blog post from last year about the + future of the ClamAV Safe Browsing database. + * FreshClam: Improved HTTP 304, 403, & 429 handling. + * FreshClam: Added back the mirrors.dat file to the database directory. + * FreshClam will now exit with a failure in daemon mode if an HTTP 403 + (Forbidden) was received, because retrying later won't help any. The + FreshClam user will have to take actions to get unblocked. + * Fix the FreshClam mirror-sync issue where a downloaded database is + "older than the version advertised." + * bsc#1181256: Fix errors when scanning files > 4G +- Update package signing key (from https://www.clamav.net/downloads) + % clamav.keyring + +------------------------------------------------------------------- +Thu Feb 25 13:48:51 UTC 2021 - Arjen de Korte <[email protected]> + +- Package clamav-milter in a subpackage +- Remove virus signatures upon uninstall +- Check for database existence before starting clamd +- Restart clamd when it exits + +------------------------------------------------------------------- +Tue Feb 9 16:00:25 UTC 2021 - Arjen de Korte <[email protected]> + +- Don't daemonize freshclam, but use a systemd timer instead to + trigger updates + + timer.freshclam + % service.freshclam + % clamav-conf.patch +- Remove obsolete patch (replaced by SOURCE_DATE_EPOCH) + - clamav-disable-timestamps.patch +- Fix unit test + + clamav-ck_assert_msg.patch +- Cleanup spec + * use pkgconfig() to resolve BuildRequires where upstream uses it + * rework creating vscan user (new system-user in Tumbleweed) + * remove obsolete configure option --disable-zlib-vcheck + +------------------------------------------------------------------- Old: ---- clamav-0.103.1.tar.gz clamav-0.103.1.tar.gz.sig clamav-disable-timestamps.patch New: ---- clamav-0.103.2.tar.gz clamav-0.103.2.tar.gz.sig clamav-ck_assert_msg.patch system-user-vscan.conf timer.freshclam ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ clamav.spec ++++++ --- /var/tmp/diff_new_pack.wNNHo0/_old 2021-04-10 15:28:58.802491577 +0200 +++ /var/tmp/diff_new_pack.wNNHo0/_new 2021-04-10 15:28:58.806491582 +0200 @@ -16,49 +16,44 @@ # -%define clamav_check --enable-check %bcond_with clammspack +%bcond_with valgrind Name: clamav -Version: 0.103.1 +Version: 0.103.2 Release: 0 Summary: Antivirus Toolkit License: GPL-2.0-only Group: Productivity/Security URL: http://www.clamav.net -Source0: http://www.clamav.net/downloads/production/%name-%version.tar.gz -Source1: http://www.clamav.net/downloads/production/%name-%version.tar.gz.sig +Source0: http://www.clamav.net/downloads/production/%{name}-%{version}.tar.gz +Source1: http://www.clamav.net/downloads/production/%{name}-%{version}.tar.gz.sig Source4: clamav-rpmlintrc Source6: clamav-tmpfiles.conf Source7: service.clamd Source8: service.freshclam Source9: service.clamav-milter +Source10: timer.freshclam Source11: clamav.keyring +Source65: system-user-vscan.conf Patch1: clamav-conf.patch -Patch4: clamav-disable-timestamps.patch Patch5: clamav-obsolete-config.patch Patch6: clamav-disable-yara.patch Patch12: clamav-fips.patch +Patch13: clamav-ck_assert_msg.patch BuildRequires: autoconf BuildRequires: automake -BuildRequires: bc -BuildRequires: check-devel BuildRequires: gcc-c++ BuildRequires: libbz2-devel BuildRequires: libcurl-devel >= 7.45 BuildRequires: libjson-c-devel -BuildRequires: libopenssl-devel +BuildRequires: libopenssl-devel >= 1.0.2 BuildRequires: libtool BuildRequires: libxml2-devel -BuildRequires: ncurses-devel -BuildRequires: pcre2-devel -BuildRequires: pkgconfig -BuildRequires: pwdutils -BuildRequires: sed BuildRequires: sendmail-devel -BuildRequires: systemd-rpm-macros -#BuildRequires: valgrind -BuildRequires: zlib-devel -BuildRequires: pkgconfig(libsystemd) +BuildRequires: pkgconfig(check) +BuildRequires: pkgconfig(libpcre2-8) >= 10.30 +BuildRequires: pkgconfig(ncurses) +BuildRequires: pkgconfig(zlib) # # Workaround to keep "make check" from using an existing libclamav # instead of the just built one. This should rather be fixed @@ -66,19 +61,23 @@ # of the test binaries. # #!BuildIgnore: clamav -Requires(pre): %_bindir/awk -Requires(pre): %_sbindir/groupadd -Requires(pre): %_sbindir/useradd -Requires(pre): %_sbindir/usermod -Requires(pre): /bin/sed -Requires(pre): /bin/tar Obsoletes: clamav-db < 0.88.3 -Provides: clamav-nodb = %version -Obsoletes: clamav-nodb <= 0.98.4 -%systemd_ordering +Provides: clamav-nodb = %{version} +Obsoletes: clamav-nodb < %{version} %if %{without clammspack} -BuildRequires: libmspack-devel +BuildRequires: pkgconfig(libmspack) %endif +%if %{with valgrind} +BuildRequires: valgrind +%endif +%if 0%{?suse_version} > 1500 +Requires(pre): group(vscan) +Requires(pre): user(vscan) +%else +BuildRequires: sysuser-tools +%sysusers_requires +%endif +%{?systemd_ordering} %description ClamAV is an antivirus engine designed for detecting trojans, @@ -90,6 +89,20 @@ support, archive support, and multiple signature languages for detecting threats. +%package milter +Summary: ClamAV Milter compatible mail scanner +Group: Productivity/Security +Requires: %{name} = %{version} +Provides: %{name}:/usr/sbin/clamav-milter + +%description milter +ClamAV-milter is a filter for sendmail(1) mail server. It uses a +mail scanning engine built into clamd(8). ClamAV-milter can use +load balancing and fault tolerant techniques to connect to more +than one clamd(8) server and seamlessly hot-swap to even the load +between different machines and to keep scanning for viruses even +when a server goes down. + %package -n libclamav9 Summary: ClamAV antivirus engine runtime Group: System/Libraries @@ -117,8 +130,8 @@ %package devel Summary: Development files for libclamav, an antivirus engine Group: Development/Libraries/C and C++ -Requires: libclamav9 = %version -Requires: libfreshclam2 = %version +Requires: libclamav9 = %{version} +Requires: libfreshclam2 = %{version} %description devel ClamAV is an antivirus engine designed for detecting trojans, @@ -130,18 +143,22 @@ %prep %setup -q %patch1 -%patch4 %patch5 %patch6 %patch12 +%patch13 -p1 %build +%if 0%{?suse_version} <= 1500 +# Create vscan user +%sysusers_generate_pre %{SOURCE65} vscan +%endif CFLAGS="-fstack-protector" CXXFLAGS="-fstack-protector" export CFLAGS="%optflags $CFLAGS -fPIE -fno-strict-aliasing" export CXXFLAGS="%optflags $CXXFLAGS -fPIE -fno-strict-aliasing -std=gnu++98" export LDFLAGS="-pie" -%if "%_lib" == "lib64" +%if "%{_lib}" == "lib64" # tomsfastmath needs this for correct operation on 64-bit platforms CFLAGS="$CFLAGS -DFP_64BIT" %endif @@ -152,10 +169,8 @@ --with-user=vscan \ --with-group=vscan \ --enable-milter \ - %clamav_check \ + --enable-check \ --enable-clamdtop \ - --disable-zlib-vcheck \ - --disable-timestamps \ --disable-yara \ %if %{without clammspack} --with-system-libmspack @@ -165,104 +180,159 @@ %install %make_install -install -d -m755 %buildroot%{_localstatedir}/lib/clamav -install -d -m755 %buildroot/%_tmpfilesdir -install -m644 %SOURCE6 %buildroot%_tmpfilesdir/clamav.conf -mkdir -p %buildroot%{_localstatedir}/spool/amavis -mkdir -p -m 0755 %buildroot/run/clamav -find %buildroot -type f -name "*.la" -delete -print +install -d -m755 %{buildroot}%{_localstatedir}/lib/clamav +install -d -m755 %{buildroot}%{_tmpfilesdir} +install -m644 %SOURCE6 %{buildroot}%{_tmpfilesdir}/clamav.conf +%if 0%{?suse_version} <= 1500 +mkdir -p %{buildroot}%{_localstatedir}/spool/amavis +%endif +mkdir -p -m 0755 %{buildroot}/run/clamav +find %{buildroot} -type f -name "*.la" -delete -print # libclammspack is not meant to be linked against by anything but # libclamav -rm -f %buildroot%_libdir/pkgconfig/libclammspack.pc -rm -f %buildroot%_libdir/libclammspack.so +rm -f %{buildroot}%{_libdir}/pkgconfig/libclammspack.pc +rm -f %{buildroot}%{_libdir}/libclammspack.so # fix the new config file names -pushd %buildroot%_sysconfdir -mv clamd.conf.sample clamd.conf -mv clamav-milter.conf.sample clamav-milter.conf -mv freshclam.conf.sample freshclam.conf -popd +mv %{buildroot}%{_sysconfdir}/clamd.conf{.sample,} +mv %{buildroot}%{_sysconfdir}/clamav-milter.conf{.sample,} +mv %{buildroot}%{_sysconfdir}/freshclam.conf{.sample,} # Systemd... -install -d -m 0755 %buildroot/%_unitdir -install -m 0644 %SOURCE7 %buildroot/%_unitdir/clamd.service -install -m 0644 %SOURCE8 %buildroot/%_unitdir/freshclam.service -install -m 0644 %SOURCE9 %buildroot/%_unitdir/clamav-milter.service -rm -f %buildroot/%_unitdir/clamav-clamonacc.service -rm -f %buildroot/%_unitdir/clamav-daemon.service -rm -f %buildroot/%_unitdir/clamav-daemon.socket -rm -f %buildroot/%_unitdir/clamav-freshclam.service +install -d -m 0755 %{buildroot}%{_unitdir} +rm -f %{buildroot}%{_unitdir}/clamav-* +install -m 0644 %SOURCE7 %{buildroot}%{_unitdir}/clamd.service +install -m 0644 %SOURCE8 %{buildroot}%{_unitdir}/freshclam.service +install -m 0644 %SOURCE9 %{buildroot}%{_unitdir}/clamav-milter.service +install -m 0644 %SOURCE10 %{buildroot}%{_unitdir}/freshclam.timer # this is broken if system does not have systemd so don't # use it at all on systems without mandatory systemd -for srvname in clamd freshclam clamav-milter;do - (export PATH=%_prefix/sbin:/sbin:$PATH ;ln -sf $(which service) %buildroot/%_sbindir/rc${srvname}) +for srvname in clamd freshclam clamav-milter; do + (export PATH=%_prefix/sbin:/sbin:$PATH ;ln -sf $(which service) %{buildroot}/%{_sbindir}/rc${srvname}) done %check - # regression tests %if !0%{?qemu_user_space_build:1} make check VG=1 %endif +%if 0%{?suse_version} > 1500 +%pre +%else + +%pre -f vscan.pre +%endif +%service_add_pre clamd.service + +%post +%tmpfiles_create %{_tmpfilesdir}/clamav.conf +%service_add_post clamd.service + +%preun +if [ $1 -eq 0 ]; then + # package will be uninstalled + rm -f %{_localstatedir}/lib/clamav/* +fi +%service_del_preun clamd.service + +%postun +%service_del_postun clamd.service + +%pre milter +%service_add_pre clamav-milter.service + +%post milter +%service_add_post clamav-milter.service + +%preun milter +%service_del_preun clamav-milter.service + +%postun milter +%service_del_postun clamav-milter.service + +%if 0%{?suse_version} > 1500 +%ldconfig_scriptlets -n libclamav9 +%ldconfig_scriptlets -n libfreshclam2 +%if %{with clammspack} +%ldconfig_scriptlets -n libclammspack0 +%endif +%else %post -n libclamav9 -p /sbin/ldconfig %postun -n libclamav9 -p /sbin/ldconfig %post -n libfreshclam2 -p /sbin/ldconfig %postun -n libfreshclam2 -p /sbin/ldconfig +%if %{with clammspack} %post -n libclammspack0 -p /sbin/ldconfig %postun -n libclammspack0 -p /sbin/ldconfig +%endif +%endif %files -%config(noreplace) %_sysconfdir/*.conf -#systemd... -%_unitdir/clamd.service -%_unitdir/freshclam.service -%_unitdir/clamav-milter.service -%_tmpfilesdir %license COPYING* %doc docs/html/* -%_mandir/*/* -%_bindir/* -%_sbindir/* +%config(noreplace) %{_sysconfdir}/clamd.conf +%config(noreplace) %{_sysconfdir}/freshclam.conf +%{_bindir}/clamav-config +%{_bindir}/clambc +%{_bindir}/clamconf +%{_bindir}/clamdscan +%{_bindir}/clamdtop +%{_bindir}/clamscan +%{_bindir}/clamsubmit +%{_bindir}/freshclam +%{_bindir}/sigtool +%{_sbindir}/clamd +%{_sbindir}/clamonacc +%{_sbindir}/rcclamd +%{_sbindir}/rcfreshclam +%{_mandir}/man1/clambc.1%{?ext_man} +%{_mandir}/man1/clamconf.1%{?ext_man} +%{_mandir}/man1/clamdscan.1%{?ext_man} +%{_mandir}/man1/clamdtop.1%{?ext_man} +%{_mandir}/man1/clamscan.1%{?ext_man} +%{_mandir}/man1/clamsubmit.1%{?ext_man} +%{_mandir}/man1/freshclam.1%{?ext_man} +%{_mandir}/man1/sigtool.1%{?ext_man} +%{_mandir}/man5/clamd.conf.5%{?ext_man} +%{_mandir}/man5/freshclam.conf.5%{?ext_man} +%{_mandir}/man8/clamd.8%{?ext_man} +%{_mandir}/man8/clamonacc.8%{?ext_man} +%{_tmpfilesdir}/* +%{_unitdir}/clamd.service +%{_unitdir}/freshclam.service +%{_unitdir}/freshclam.timer %defattr(-,vscan,vscan) -%dir %attr(750,vscan,vscan) %{_localstatedir}/spool/amavis %dir %{_localstatedir}/lib/clamav +%if 0%{?suse_version} <= 1500 +%dir %attr(750,vscan,vscan) %{_localstatedir}/spool/amavis +%endif %ghost %attr(755,vscan,vscan) /run/clamav +%files milter +%config(noreplace) %{_sysconfdir}/clamav-milter.conf +%{_unitdir}/clamav-milter.service +%{_sbindir}/clamav-milter +%{_sbindir}/rcclamav-milter +%{_mandir}/man5/clamav-milter.conf.5%{?ext_man} +%{_mandir}/man8/clamav-milter.8%{?ext_man} + %files -n libclamav9 -%_libdir/libclam*.so.9* +%{_libdir}/libclam*.so.9* %files -n libfreshclam2 -%_libdir/libfreshclam.so.2* +%{_libdir}/libfreshclam.so.2* %if %{with clammspack} %files -n libclammspack0 -%_libdir/libclammspack.so.0* +%{_libdir}/libclammspack.so.0* %endif %files devel -%_libdir/pkgconfig/* -%_libdir/libclam*.so -%_libdir/libfreshclam*.so -%_includedir/* - -%pre -getent group vscan >/dev/null || %_sbindir/groupadd -r vscan -getent passwd vscan >/dev/null || \ - %_sbindir/useradd -r -o -g vscan -u 65 -s /bin/false \ - -c "Vscan account" -d %{_localstatedir}/spool/amavis vscan -%_sbindir/usermod vscan -g vscan -%service_add_pre clamd.service freshclam.service clamav-milter.service - -%post -%tmpfiles_create %_tmpfilesdir/clamav.conf -%service_add_post clamd.service freshclam.service clamav-milter.service - -%preun -%service_del_preun clamd.service freshclam.service clamav-milter.service - -%postun -%service_del_postun clamd.service freshclam.service clamav-milter.service +%{_includedir}/* +%{_libdir}/pkgconfig/* +%{_libdir}/libclam*.so +%{_libdir}/libfreshclam*.so %changelog ++++++ clamav-0.103.1.tar.gz -> clamav-0.103.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/clamav/clamav-0.103.1.tar.gz /work/SRC/openSUSE:Factory/.clamav.new.2401/clamav-0.103.2.tar.gz differ: char 5, line 1 ++++++ clamav-ck_assert_msg.patch ++++++ >From 58d199cbe00e8a5ef5858ffc7991a346b9f3469e Mon Sep 17 00:00:00 2001 From: Orion Poplawski <[email protected]> Date: Thu, 17 Sep 2020 22:26:04 -0600 Subject: [PATCH] Fix ck_assert_msg() call --- unit_tests/check_jsnorm.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unit_tests/check_jsnorm.c b/unit_tests/check_jsnorm.c index 5067a21a55..64f6bf8b37 100644 --- a/unit_tests/check_jsnorm.c +++ b/unit_tests/check_jsnorm.c @@ -247,7 +247,7 @@ static void tokenizer_test(const char *in, const char *expected, int split) fd = open(filename, O_RDONLY); if (fd < 0) { jstest_teardown(); - ck_assert_msg("failed to open output file: %s", filename); + ck_assert_msg(0, "failed to open output file: %s", filename); } diff_file_mem(fd, expected, len); ++++++ clamav-conf.patch ++++++ --- /var/tmp/diff_new_pack.wNNHo0/_old 2021-04-10 15:28:58.858491643 +0200 +++ /var/tmp/diff_new_pack.wNNHo0/_new 2021-04-10 15:28:58.858491643 +0200 @@ -113,24 +113,6 @@ # Sets the group ownership on the unix socket. # Default: disabled (the primary group of the user running clamd) -@@ -106,7 +102,7 @@ Example - - # TCP port address. - # Default: no --#TCPSocket 3310 -+TCPSocket 3310 - - # TCP address. - # By default we bind to INADDR_ANY, probably not wise. -@@ -114,7 +110,7 @@ Example - # from the outside world. This option can be specified multiple - # times if you want to listen on multiple IPs. IPv6 is now supported. - # Default: no --#TCPAddr 127.0.0.1 -+TCPAddr 127.0.0.1 - - # Maximum length the queue of pending connections may grow to. - # Default: 200 @@ -204,7 +200,7 @@ Example # Run as another user (clamd must be started by root for this option to work) @@ -156,27 +138,12 @@ # Path to the database directory. # WARNING: It must match clamd.conf's directive! # Default: hardcoded (depends on installation options) -@@ -35,12 +31,12 @@ Example - - # Use system logger (can work together with UpdateLogFile). - # Default: no --#LogSyslog yes -+LogSyslog yes - - # Specify the type of syslog messages - please refer to 'man syslog' - # for facility names. - # Default: LOG_LOCAL6 --#LogFacility LOG_MAIL -+LogFacility LOG_MAIL - - # Enable log rotation. Always enabled when LogFileMaxSize is enabled. - # Default: no @@ -48,12 +44,12 @@ Example # It is recommended that the directory where this file is stored is # also owned by root to keep other users from tampering with it. # Default: disabled -#PidFile /var/run/freshclam.pid -+PidFile /run/clamav/freshclam.pid ++#PidFile /run/clamav/freshclam.pid # By default when started freshclam drops privileges and switches to the # "clamav" user. This directive allows you to change the database owner. @@ -184,7 +151,7 @@ -#DatabaseOwner clamav +DatabaseOwner vscan - # Use DNS to verify virus database version. Freshclam uses DNS TXT records + # Use DNS to verify virus database version. FreshClam uses DNS TXT records # to verify database and software versions. With this directive you can change @@ -127,7 +123,7 @@ DatabaseMirror database.clamav.net ++++++ clamav-rpmlintrc ++++++ --- /var/tmp/diff_new_pack.wNNHo0/_old 2021-04-10 15:28:58.878491667 +0200 +++ /var/tmp/diff_new_pack.wNNHo0/_new 2021-04-10 15:28:58.882491672 +0200 @@ -1,3 +1,4 @@ addFilter("non-standard-uid.*") addFilter("devel-file-in-non-devel-package.*") addFilter("obsolete-not-provided") +addFilter("systemd-service-without-service_.* freshclam.service") ++++++ clamav.keyring ++++++ --- /var/tmp/diff_new_pack.wNNHo0/_old 2021-04-10 15:28:58.906491699 +0200 +++ /var/tmp/diff_new_pack.wNNHo0/_new 2021-04-10 15:28:58.906491699 +0200 @@ -1,52 +1,64 @@ -----BEGIN PGP PUBLIC KEY BLOCK----- -mQINBFj3nAABEADRS+B5sv1AnRBvf8dLFd9zuXjFc7e+laeTKcGUKhM4AV8G2qJU -wfQFu35J8D5PkTit/qCYCpnrcE9gR1tTvhSDy0ekWfNlqzukfLRvL5VuMq08+ebz -3QaQP2lvBzhw5afInLSfu1xjMHdd6048kGUOCGQjBZpNd0tOt0QNfoqTUzAN0Jaq -lWnbjGm2kIxD6gyugG031TCcRE+ck9dxg67KEEXlGNmpUF6GWrozB+tRKt9VP/hc -db/Qyri3DIEI1RJlSJhBrbasSBbSkBaH0mDOQ3NAxfq95/2rY/K0kg1o8YsxVKvz -p1FLE/3Cwxbs81JLtvrrapfmFZFOSahBLyMFDLet7y+m7r8fUMjj7bSeWwIsGcPa -Jh+mYEZOibJkgQcgcFE3vP+Px9mXa99VmD0iVj8wIt4sVGxjKnRr4oWpD4/A3E4+ -KjxKapnrE45WciSjakxtBMl3ltbT3F+D4Tpnq2ijL7pwMlNreeguIeVDFGd+jvYY -m5dGfjmFQhZ29Fp+VDHjhkbDx0JILJF2YRofcml4Z+B3Hwqr1JQetGYiDVOZCEUZ -V4dVmhUBsEfbznXT7+SsV+u34F3IOVs7m0bQb2ty3unlUGmEoP2LVPzWZWHQN4vu -X41e0t+3dZCurMvCLdU2V4XIGCwACAF5WFhx9xPmZdmSAYjIjRKu3KSy1QARAQAB +mQINBGBjkiwBEADgJTEabt5zCareK9pJJswGU62smrq3uOaaDhtgztj3bxRY/UGT +jypxMee1S/fGWQZQy52lFOXLud5gFC5QU8Yk+7EAsh2ZJSKtWUw8/iMxZ4vsrKVV +QQRLTqMUY16R6/8UzdIT/hD6CbgWgiXF4NH5AGleNqjkF4TXrGof0AK0veekZYJV +WWStqJR/cIiG0nxDQ87RWfeZgrULZmA8uii22po7rGGzxT0byb83dKK+7IoJ/6B/ +ZlI0PmzuJ9/Xp6Mmm//sdPEqRwedt2aGrvtdF79xYJ1tDhOVMpID0aPdURBwlliq +fyKGaIUEa1ke+Dy7sQF8i3zY7ce6PZOtbsts9xsJLvF98VhRsFy0vProPv1mVbiU +PoxxPTnyLeGUm27amIMl4NfX4a8Hdu+ExzKprqWo3Ir08HQzNt6QoFghDIpi9nm4 +k327CJzJv/g2dq5kY/KU6wFHbdH3zP7u+p9DDqKJYFebPCvwM1hMxPdLqemTsfob +kJ4iXcAXjpMqwXX9m0lyQcRHdIdc99yyCUMdPNfapLgY7rOahsS16795/5KSrCuF +h2RcoAWUjh6sGjgGIY4Hy1qQwp3t6X/L6TOhDkBDWId5bTKFR9NqrVprOVsUutbs +0TOqLyH4GXCpE9vzg8DX7FTdRiCTpbyQ7VuSxRN/vAyVRP4chrABNfvh/QARAQAB tDtUYWxvcyAoVGFsb3MsIENpc2NvIFN5c3RlbXMgSW5jLikgPHJlc2VhcmNoQHNv -dXJjZWZpcmUuY29tPokCPQQTAQoAJwUCWPecAAIbAwUJB4YfgAULCQgHAwUVCgkI -CwUWAgMBAAIeAQIXgAAKCRDxP54WvKW/rQZnD/9xWiC/y9JEsbHnsNrzGosGQxsp -QSxgDcHUM0hjuhfpxDyaT/bm/qJcHWDLh7c/WiL0B1b9bGaj/soSn5ZSKaSAyThF -S48uG0q1rFlr2E/vP4ExZacLLndRHD4oaR/glp+NLsB60skz2b70IazSfm4uvKE0 -Wb7EgXm3exyJxS2vht51xLvPxj+VY7rVVJ7oQKMgv+Z9wMUj9kwbb7V/ytoYUVgG -N0aJ7tzuyOk2DeZ/0Mh4swEQ5QQE9X2KREOAfcrfpnyV8vIrTnwSian6KstuoAN9 -Ux+tqXS9SmexTaILqwXi0C1k7Loy5GDIKxwQHYI5xJ4eQbJNTGWTbGzQDd8VLRN4 -9yy0DYrayfTenWvsnBhS27X/dKitZVT90vKlqEaEMYRXV2d6Bu9Hq/USv1+AAFBB -MMi/9UBf3NHI3egNp//OkUReiusUImiq7TEBYSXmpVJ5L8SbDiahZ+YUzJHkd5u+ -j6BLNybj9kGilGRf3IsRqcu1BNvO8pqE/GkwDpDXXQWgfOykTflCROK32Nz4+asr -0y5Q73MiifkqTD0f/bDsryHtzGM+EIg81FcUCrtAHf/K9JDephwXstrhXue9Uupp -Arg/iHXXOcxR0ThrrRN+Fx10/5e2ALrVely5ZNZVhuvxg6EKzwJdnyw6IivJB/27 -IvlaaeLwpFaVgHgXIbkCDQRY95wAARAAqH5sChZORId5RJv3PQWmFZwLAIWaj0Zy -7QQnUvJecAi0doQe2w4fGTZOSfOX4LxPVgHkc59omPnDs30sVp8YiGt4luSLvQ49 -OhKUtPW6Z5B3UxTdbZCF1zs8t3tkHkGjxwfbhoZKdyrJvVQ7tz2l7lxiSI6x65I7 -v/+auTUc+ihskSSCvm6XeX3ekKOWJ96pnLItC1Pvh2bd4BOW4swSlXZ2k1/p1c2G -5vC7bFwUJbb67Y9wPJl0nCCBzZCfAtgMmKieq51rvtJ/83CNf8P7dMmZbRwUp4fN -xLPrvocDAJn3drfoKV3eX3st5M7SODKIF2gglXIQwYb1h/IJSRap9tgktOQVBBuy -tI6n1zo2Ga5kRK06tX/NBVRQI8we8WR8ePVkg0bZYIo1EKNa89xjTwQXqrbmvs7F -VSpsV2zMtMu6zDtJBcAGW+1feo7m1kL5ZGR4Dl3rbdImq2AdAt2TRfisZYmYAQyw -hIa7eNted2Bxs4KWrgwHgkk1ljjn/wF3InyKXnySPIpW2LT+kRWS0KujIDeiZTp5 -tAQP2qfL2mFcStyeBSqDW6s725a2oYv74yCycbbYSD3nxjruWrYVjF01/MKoSx5o -BFRkN7/n4hIpvcSlIzmmFPocbZCRTP9+4Miewq7e9ASnx+vxFpelBZTM1Oe+DZdB -zEvTjbqK698AEQEAAYkCJQQYAQoADwUCWPecAAIbDAUJB4YfgAAKCRDxP54WvKW/ -rQELEACGWflvcVbhmeSAbJqZNRcUGHQ0o2YMEHptErs0f6KVhBlI6Ouc37VHJgH0 -Vu75o5C/aagNghMPdAKCGf4DbYcBd8FzM7EHZspMcG5/rrE9zX9zYlcdD8KAN5Nm -ZZQz6+htMzD6ROdJWjkdnIpZvAb/6weSpj9ZI1hAhMr+2+kU13fUk70x2cWGMVsT -LpTjOo4ad0Qec5/s4MZ7enGz34DJLLCIzcA3K2S6AxO4cucord6onIkgikDq0LvX -RfMp18n+0vlEk6msuhSYAi04iPAS/mbYCpsuNMQefF6LJmICMpn2Vm4TOW6GMIa9 -lilC0oodVYYCKvhdXWB1MRoO5axnxSrNNLm8s7pxR5NzRvLxBiBxVqAJuw4rvFxN -4BZ5M1JSZWu2Rcz+xeh/szXRmWUbLScr4hwQRBSi2efiqPYjkWmxk8MJ5pHvwNK1 -DO33H3btRriWK7RZYRYq2Bjpuo8iGevgZ5pyiJkX1p72UehkC6ogGgW2ULgolIUa -LkZivq7Z2vICdouOKAhA2/QaQG0mA7O7RdOLWPX7EH720e4yqUPH9Hxv95EAeYkr -4Zg38cdiIevqjwUOwjMpxtIAj3ol+OvBFbiqJW5PICm7vi5HMIXuwQ6aIgSVDfic -Tjaszr4bkQdr3OpqhR4+ZN5/BAKY4IIzMmvF6v1X8s9DtzjFFg== -=rmWe +dXJjZWZpcmUuY29tPokCPgQTAQIAKAUCYGOSLAIbAwUJA8JnAAYLCQgHAwIGFQgC +CQoLBBYCAwECHgECF4AACgkQYJsCTys+3QfbLg//eZ0yCLr957FtztVlLIHYLpJn +LIl8m+hu3KeUTIwvMoCLiw48cWqFZaJS9PTmrraSj5SKMDnAYFl4O0fhHfQiWDjb +sZ32hQni1PcqxoXqSnkXD7mXjcPH2WuNnQM5WZoAD2VmksqRT57I/K2omW/sjaVe +Nbq3GSOy8WThibswxzioDHtTPFa0/Ah2qq8OkcVJuTwCS1xkLijJc3jx/pOBHWFA +BA4VX5pwcSou/woJ+ySsgBGEo5hOsd0r7h3a0O8EiuGulHTqQt87rVWGv0JKhnub +FULr/ld8+d1zGvJL3OzFG6udjWjw3QqsLDZa94G1ksZWgqr/RgexlSYuxPW+lKUC +QkgotLaEKQC4cpBLRcJEjWyrf4IjoJvkFrUtPsVH9VStICUQATyXARNVWbnJHq3Y +qynCXSB4NZvdo9BF6Tx3FA+ZUjK4/X/UsjL/Hmv99huBctQsWL7gQCoSw9YOt4qs +/As6fgPaNpYb9woJqNMEQNmrhfnnX9PGaM5dM769/E5vF67mkhBNqVJ0+4gyrpTU +T7Pmavrc3T4aSSde8eG6zSlmW8wM5xELfK5TeTexBKGAaDV8c2BkfenRO8OvBSvr +Gz+Xp/YzO9uGUPnbMsTVtxClmzmEj/MVpvtRdEo+dbVOSy8nk3XCu7jMjpojggPv +YQ+4CZYxYpW1T2hSFxGJAhwEEAECAAYFAmBjkn0ACgkQ8T+eFrylv628FA/7BEZI +mkl9Poxf1Omdzq+AGa5/1mnJ39jobc+wMBBww2baJX0YnYcZX0xfm5db/SaWbK7y +EGWRnMAG0qt32zE3lwrLAlMcJ4a5RuSIIob1FDHXZ0YE0196FBJqsnMoheV6s9FL +W5wj0Yhsbjo88MyhQrbHwnaZZ86EIdXlx3lcjSNStdMtzikBNFDQGb80OFMDU3Ab +c0epVagX7tYI4vTHS1IK6SJ+E+UdXPN3Ci5HHvA9dMp6GRwTYgbvMwkjH7bPD47b +/gOvAUj5+34p4dN7Lvy8VTvRiTGsk7EpY1zUibmjjpZbonH+wZu/hp7mPbUExtzC +2tZ6TES7lAq+vDlrg0rJuMDAJTemICBwd3waeEdPtNIBycfTf1qKevarrQPByeM9 +Cghw0PIh9Z5woNOoeTdvoyLm4kRSUqqPpAHiqgnC3nVVZc//NdeuoDDcstgYqsoK +bSqW/1xfFjAE5f+a5uuu3I+6oVF83e+fLCuoVr0l1jdGx8jEo0F0TiP7qJ4HE9zs +HsfQ8A7rlQFDU/DXQibrwVioVsVbX4D3cYTAQ3hwZHFZ4yF79fnyQuVis8dVjw0b +w42rD0enmlxJ8MdZ6Xuq9pu74fQhH9vPhX5sUFU9uXmvYdeHm3IaP3U59y7Azapt ++Rf7YvmXTCsfH9Rlw1MZKHfOFoMozqJs7sqDfGi5Ag0EYGOSLAEQAM5kdheiwStz +nKiaIWaO+0PBA8bAv2xG7qW/Di85xdcH9miHZM9+lx/iZoOBC9wZC9eatV4Hcukf +f700a/LGZSYVDvHvdEWbTv6ZwvHzbxuc1Kv8cLYopRUfOAwMYOmXriMLxVmd3fcf +PNsfPRqfkaZRdkm7qTbPDeKpSL157HbUG64Eej3cOViq49Hy9L6jtfjtZVxX7Oav +jnEpyezG6qSIAkvD6O7JYg3yfkr4sa44qohq9lDfjWpoXMebu0WsIyW11hm+7KMr +BMHjlNgXppu0+ryeKfQiFjPDBd9aflnHy2e8aHef9S5349thNGzjV3TNMV6A6oAN +2XQ7pgj5DTwMZtHFCjdEHIyfGCAgQQL0/MaFzKwuw/l/m31smZgItAZXYY1xoC2g +h7LTPZ/3t2VVVof4TNXDc+pUNgY6bwPBksuhsX8qsldDr5q3jdHZsjlycpL38Z4E +ZNg3BqxJlVseB395ZOQ6FCtHGh6rpsYQZDj1QWcUyev8NHSbSNRMS2/Nn5bT3KgE +WEWrmOxp3iMmunBqmnt2/xJ83PKRTbSKgcG+Y/+DtnleHpRueRUPC/5XX0DNznSj +F10vAh4XtBKGBNaHU9VvnMXlYeJ9kCMdSs7cM4FfLFMtPkFwpDYhvQRAEwt11RV6 +bGo5ZCgGrHGIBlNk6ZSO1hP15hUtkWU7ABEBAAGJAiUEGAECAA8FAmBjkiwCGwwF +CQPCZwAACgkQYJsCTys+3QfI7Q//Sb2yotfcsG5Q2FkHRBE85su01c6pewImV9bo +fNhATSQ37yVHUDrchm+kY6Pq5Tdgg+eAMcYz2yv9JhFxJyzgI0viQrkjD7oXeRTG +Z0CvzxHhTakAOADXAnYtwmJglEBTCCbUZ968kQkdBxEaUjVWPCMyIceRr8kUfiCj +X51+DLESy8b5lOBhprO6vDukk/rmDruIpJPhJ3f89gsp2Ry7gk7a5ENIuVEElLK6 +OPBZhC3dDZwsvm5CYb62+U/b1xtmElpgGbNJCjxvAZiJ0WN2zfBXan+SJ4I9NFUw +9jvSURvDV24s4YPhkbZuOIqQEEYF8QMZ1VJlsr7BoWIXrdKDNJbmEVyx3UiYXKD1 +BVXCQADPu8G8EPuo4yAfWymJAOJbAqNF2Op6+sC7/v8Xcgc3PGGyu23cZwikfCAg +V+beywTPI5+eVV5F/rpxXOlvNxT0NOg3UOeQ9GvCbD5ZcuDzmhqso0eMABeq5K5X +B12xlWNaTZsIt8Dim4uKaKMGeB+6iygkHITbay0sMUo0dX6nT27bjX5dTBo/vnVA +PYuCS6rh8ojalR1fYFKA1zdeSaJ2EW5KmgC9yedylSbHdQ+LjSY3t/Ut4RYaekID +eGmVoQkJkL7gIAs8NOYwG3ayr0AtmeMagAMy94NH5ufVgFk+QPmXpzS7rMLQ3Is1 +ZOuWNrQ= +=NP/0 -----END PGP PUBLIC KEY BLOCK----- ++++++ service.clamd ++++++ --- /var/tmp/diff_new_pack.wNNHo0/_old 2021-04-10 15:28:58.934491732 +0200 +++ /var/tmp/diff_new_pack.wNNHo0/_new 2021-04-10 15:28:58.934491732 +0200 @@ -1,12 +1,16 @@ [Unit] -Description=Clamav antivirus Deamon -After=network.target freshclam.service -Requires=freshclam.service +Description=Clam AntiVirus userspace daemon +Documentation=man:clamd(8) man:clamd.conf(5) https://www.clamav.net/documents/ +After=network.target +# Check for database existence +ConditionPathExistsGlob=/var/lib/clamav/main.{c[vl]d,inc} +ConditionPathExistsGlob=/var/lib/clamav/daily.{c[vl]d,inc} [Service] Type=forking ExecStart=/usr/sbin/clamd TimeoutStartSec=5min +Restart=always ExecReload=/bin/kill -USR2 $MAINPID ;User=vscan ;Group=vscan ++++++ service.freshclam ++++++ --- /var/tmp/diff_new_pack.wNNHo0/_old 2021-04-10 15:28:58.950491751 +0200 +++ /var/tmp/diff_new_pack.wNNHo0/_new 2021-04-10 15:28:58.950491751 +0200 @@ -1,14 +1,12 @@ [Unit] -Description=Freshclam virus definitions downloader -After=network-online.target +Description=Clam AntiVirus database updater +Documentation=man:freshclam(1) man:freshclam.conf(5) https://www.clamav.net/documents/ +After=network-online.target nss-lookup.target Wants=network-online.target [Service] -Type=forking -ExecStart=/usr/bin/freshclam -d +Type=oneshot +ExecStart=/usr/bin/freshclam ;User=vscan ;Group=vscan ;PrivateTmp=yes - -[Install] -WantedBy=multi-user.target ++++++ system-user-vscan.conf ++++++ # Type Name ID GECOS [HOME] g vscan 65 - - u vscan 65 "Vscan account" /var/spool/amavis ++++++ timer.freshclam ++++++ [Unit] Description=Timer for freshclam virus definitions downloader [Timer] OnBootSec=5m OnUnitActiveSec=2h Persistent=true [Install] WantedBy=timers.target
