Re: [Clamav-users] feature request?

2008-05-09 Thread Chuck Swiger
On May 8, 2008, at 5:43 PM, Dennis Peterson wrote:
 Can't you do this via something like:

 % ls -1  /tmp/filelist_to_scan
 % xargs clamdscan  /tmp/filelist_to_scan

 The clamd user would need to be root for this to always work. That is
 probably not a good idea when scanning user space.

If clamd doesn't have permissions to read some of the files you want  
to check, use clamscan as root instead, although any potential  
security risk from a maliciously crafted input file would likely  
affect clamscan in such circumstances as well.

Add salt and season to taste.

-- 
-Chuck

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] feature request?

2008-05-09 Thread Dennis Peterson
Chuck Swiger wrote:
 On May 8, 2008, at 5:43 PM, Dennis Peterson wrote:
 Can't you do this via something like:

 % ls -1  /tmp/filelist_to_scan
 % xargs clamdscan  /tmp/filelist_to_scan
 The clamd user would need to be root for this to always work. That is
 probably not a good idea when scanning user space.
 
 If clamd doesn't have permissions to read some of the files you want  
 to check, use clamscan as root instead, although any potential  
 security risk from a maliciously crafted input file would likely  
 affect clamscan in such circumstances as well.
 
 Add salt and season to taste.
 

If permissions on home dirs or (dev dirs) are set correctly clamd would 
be locked out of all of them. But there's no reason to assume that would 
be the case in the OP's world. If it is the case he could always pipe 
files as root to the clamd socket. There's a clamd-stream client on 
sourceforge from a couple years ago that may do the trick.

I distincty said 'No salt' - Milton

dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Upgraded freshclam not updating

2008-05-09 Thread Brian Bebeau
Jim Preston wrote:
 Brian Bebeau wrote:
 We have a test box that is a local update server (that our other
 boxes get the dbs from) that I just upgraded to 0.93. The upgrade
 works well on my personal workstation, but fails on this box. Any
 pointers on getting this updating will be appreciated. It was
 updating ok before the upgrade. Trying to retrieve the daily db
 via wget resolves the host but hangs before returning any data.


 Trying to download http://db.us.clamav.net/main.cvd (IP: 64.142.100.50)

 Hi Brian,
 
 What happens if you  put  http://db.us.clamav.net/main.cvd into browser 
 addressbar? It should download the file.
 Are you running Freshclam? As daemon or from cron? If from cron, what 
 time are you checking?

This box doesn't have a browser, it's a server. That's why I was trying 
to use wget. If I do that, I get:

# wget http://db.us.clamav.net/main.cvd
--16:52:08--  http://db.us.clamav.net/main.cvd
= `main.cvd.2'
Resolving db.us.clamav.net... 64.142.100.50, 64.246.44.108, 
128.121.60.235, ...
Connecting to db.us.clamav.net|64.142.100.50|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 13,050,207 (12M) [text/plain]

  0% [ ] 0 --.--K/s

and it hangs there, never downloading anything.

-- 
Brian Bebeau
Trustwave
http://www.trustwave.com

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html