| HTTP Anti-Virus Proxy http://havp.hege.li/forum/ |
|
| clamdscan or clamscan http://havp.hege.li/forum/viewtopic.php?f=3&t=239 |
Page 1 of 1 |
| Author: | quartex73 [ 23 May 2007 11:26 ] |
| Post subject: | clamdscan or clamscan |
Hi, From README: Library is used directly, so there is no need for clamd running. If you choose to use clamd (which is not recommended as library support has less overhead), you need to enable AllowSupplementaryGroups in clamd.conf, and add clamav user to havp group. So is not recommended to use clamd...Why, since it's faster than clamscan (and in 0.90 this is more notable than anymore)? Another question about mandatory locks...if I cannot dedicate a new partition and I have to use say for example /home..where there are web document roots too...it it a security risk? Thanks in advance |
|
| Author: | hege [ 23 May 2007 11:47 ] |
| Post subject: | Re: clamdscan or clamscan |
quartex73 wrote: Hi, From README: Library is used directly, so there is no need for clamd running. If you choose to use clamd (which is not recommended as library support has less overhead), you need to enable AllowSupplementaryGroups in clamd.conf, and add clamav user to havp group. So is not recommended to use clamd...Why, since it's faster than clamscan (and in 0.90 this is more notable than anymore)? library != clamscan HAVP loads library and signatures and keeps them in memory. Exactly the same as clamd. Quote: Another question about mandatory locks...if I cannot dedicate a new partition and I have to use say for example /home..where there are web document roots too...it it a security risk?
Mandatory locking is not really a risk. Only local user in the server could possibly create a locked file and that could be used to hang some processes trying to read the file. So feel free to mount -o remount,mand /home or add mand to fstab options. |
|
| Author: | quartex73 [ 23 May 2007 14:18 ] |
| Post subject: | |
Thanks hege This is exactly what I missed.. Now is clear as mud. keep up the good work! |
|
| Page 1 of 1 | All times are UTC + 2 hours [ DST ] |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|