HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: clamdscan or clamscan
PostPosted: 23 May 2007 11:26 
Offline

Joined: 23 May 2007 11:19
Posts: 5
Hi,

From README:
Library is used directly, so there is no need for clamd running.

If you choose to use clamd (which is not recommended as library support has
less overhead), you need to enable AllowSupplementaryGroups in clamd.conf,
and add clamav user to havp group.


So is not recommended to use clamd...Why, since it's faster than clamscan (and in 0.90 this is more notable than anymore)?

Another question about mandatory locks...if I cannot dedicate a new partition and I have to use say for example /home..where there are web document roots too...it it a security risk?

Thanks in advance


Top
 Profile  
 
PostPosted: 23 May 2007 11:47 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
quartex73 wrote:
Hi,

From README:
Library is used directly, so there is no need for clamd running.

If you choose to use clamd (which is not recommended as library support has
less overhead), you need to enable AllowSupplementaryGroups in clamd.conf,
and add clamav user to havp group.


So is not recommended to use clamd...Why, since it's faster than clamscan (and in 0.90 this is more notable than anymore)?


library != clamscan

HAVP loads library and signatures and keeps them in memory. Exactly the same as clamd.

Quote:
Another question about mandatory locks...if I cannot dedicate a new partition and I have to use say for example /home..where there are web document roots too...it it a security risk?


Mandatory locking is not really a risk. Only local user in the server could possibly create a locked file and that could be used to hang some processes trying to read the file.

So feel free to mount -o remount,mand /home or add mand to fstab options.


Top
 Profile  
 
 Post subject:
PostPosted: 23 May 2007 14:18 
Offline

Joined: 23 May 2007 11:19
Posts: 5
Thanks hege
This is exactly what I missed.. Now is clear as mud.

keep up the good work!


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group