[Pkg-clamav-devel] package status for jessie

[Andreas Cadhalpun]

Hi,

On 27.08.2014 09:26, Sebastian Andrzej Siewior wrote:
> On 2014-08-26 23:51:49 [+0200], Andreas Cadhalpun wrote:
>> Apropos libclamunrar: It would be nice if we could get rid of that package
>> in non-free. There is a free 'unar' package, which can extract RAR v2 and
>> v3, so I think it should be possible to let unar extract rar archives to
>> some temporary directory and then let clamav scan the extracted files,
>> eliminating the need for libclamunrar. Just an idea.
>
> Hmmm. Not sure if there is a typo and you meant 'unrar' instead but
> there is also an 'unar' package.

I really meant 'unar', which is a LGPL-2.1+ implementation that can 
extract RAR archives.

> The former has problems with "some v3"
> archives and the latter does not mention any limitions. But then it
> depends on gnustep (yay!) and nothing else so I wonder where that rar
> code is comming from. It isn't documented as far as I can tell and you
> can't study the unrar code. 7z has a rar plugin which is also in
> non-free. So I would be suprised if the situation here is different. But
> lets have a look :)

Then let me surprise you: it is actually a free implementation, see e.g. 
[1].

The only problem I see is that it is no library, but only a command line 
tool...

Looking further, there is also libarchive [2], which claims to support 
rar (read only, with some limitations).

Best regards,
Andreas


1: https://www.fsf.org/blogs/licensing/free-rarv3-extraction
2: https://tracker.debian.org/pkg/libarchive