[Pkg-clamav-devel] Bug#761162: clamav-unofficial-sigs: Cron job results spread onto mail and logs

[Paul Wise]

On Thu, 2014-09-11 at 19:10 +0200, Alessandro Vesely wrote:

> I'd rather suggest something along the lines of the attached patch
> (not tested).  It should get rid of some cron spam.  For reporting, I
> think libclamav does issue some warnings if a database is unacceptably
> old, not sure that covers all databases though.

Two issues with the patch:

I don't think hardcoding the version number in user-agent is a good
idea. I also don't think setting a version number in user-agent is
useful either. I also don't want the clamav-unofficial-sigs user-agent
to be specific to Debian so that part of the patch will be removed until
Bill adds it to the official version.

You removed the comparison between the original dbs in the clamav
directory and the newly downloaded dbs.

I'll fix these and try to test the patch and get the result in jessie.

> On Thu 11/Sep/2014 12:20:11 +0200 Paul Wise wrote:
> 
> > You can change the default URL by putting si_url=... here:
> > 
> > /etc/clamav-unofficial-sigs.conf.d/sanesecurl.conf
> 
> Hm... that would work if those assignments were done before sourcing
> $config_source.

I guess you missed that the main configuration file sources the files in
the conf.d directory (as well as the ones in /usr):

/etc/clamav-unofficial-sigs.conf

> You're right.  Unlike Sanesecurity, SecuriteInfo have no premium
> mirror.  Instead, they warn not to download files more than once a day
> on pain of ip-ban[1].  Hence, I changed to "24" the default
> si_update_hours (it is "4" in the dist clamav-unofficial-sigs.conf).

I guess that should be changed in the official package too...

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20140912/0f2e1a1b/attachment-0001.sig>