* Mark Brown: >> If you've got a reasonable complete copy of the Debian package pool >> and you are willing to run Clamav across it, please respond to this >> message. > > Oh, I was actually just working on some other approaches to checking for > people doing this sort of stuff and right now I've got access to a very > nice mirror - I think I may just give it a go.
I'd be especially interested in a test run against dpkg*.deb (across many architectures). You need to supply the --deb parameter, otherwise it won't work, and you should use the CAN-2005-2096.db signature database. Running clamscan across the whole package pool will take some time, though. Decompressing and scanning are both quite CPU-intensive operations. Unfortunately, we have to check all architectures individually because spurious buildd configuration changes might trigger static linking of zlib. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
