[Pkg-clamav-devel] Bug#733998: clamav-unofficial-sigs: Script depends on bashisms for config file, but calls #!/bin/sh

[Rachel McGregor Rawlings]

Package: clamav-unofficial-sigs
Version: 3.6-1
Severity: important


The configuration instructions for clamav-unofficial-sigs.conf include the
following:

# If you would like to include medium and high risk databases, please read
# the comments in the upstream configuration file listed above. To modify the
# variables you would add something like this (the whitespace is important):
#
# ss_dbs+=" something.ndb"
# si_dbs+=" somethingelse.ndb"

This is a bashism which causes the program to kick errors and fail to download
the additional databases when it is run with /bin/dash, the default alias for
/bin/sh.

It is fixable at the package level by changing the shebang line in
/usr/sbin/clamav-unofficial-sigs to 
#!/bin/bash
and including bash as a dependency. 


-- System Information:
Debian Release: 6.0.8
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-0.bpo.4-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash

Versions of packages clamav-unofficial-sigs depends on:
ii  bind9-host [hos 1:9.7.3.dfsg-1~squeeze11 Version of 'host' bundled with BIN
ii  clamav          0.97.8+dfsg-1~squeeze1   anti-virus utility for Unix - comm
ii  clamav-daemon   0.97.8+dfsg-1~squeeze1   anti-virus utility for Unix - scan
ii  curl            7.21.0-2.1+squeeze6      Get a file from an HTTP, HTTPS or 
ii  dnsutils        1:9.7.3.dfsg-1~squeeze11 Clients provided with BIND
ii  gnupg           1.4.10-4+squeeze4        GNU privacy guard - a free PGP rep
ii  rsync           3.0.7-2                  fast remote file copy program (lik

clamav-unofficial-sigs recommends no packages.

clamav-unofficial-sigs suggests no packages.

-- Configuration Files:
/etc/clamav-unofficial-sigs.conf changed:
for f in /usr/share/clamav-unofficial-sigs/conf.d/*.conf ; do
	if [ -s "$f" ] ; then
		. $f
	fi
done
unset msrbl_dbs
unset si_dbs
unset mbl_dbs
ss_dbs+=" blurl.ndb"
ss_dbs+=" spamattach.hdb"
ss_dbs+=" winnow_extended_malware.hdb"
ss_dbs+=" winnow.attachments.hdb"
ss_dbs+=" winnow_bad_cw.hdb"           
ss_dbs+=" bofhland_cracked_URL.ndb"   
ss_dbs+=" bofhland_malware_URL.ndb"  
ss_dbs+=" bofhland_phishing_URL.ndb"  
ss_dbs+=" bofhland_malware_attach.hdb"
ss_dbs+=" crdfam.clamav.hdb"         
ss_dbs+=" porcupine.ndb"            
ss_dbs+=" phishtank.ndb"           
unset clamd_socket
max_sleep_time="1200"


-- no debconf information