[Bug 396171] Review Request: clamav - Anti-virus software (for EPEL)

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: clamav - Anti-virus software (for EPEL)


https://bugzilla.redhat.com/show_bug.cgi?id=396171





------- Additional Comments From kevin at tummy.com  2007-12-16 14:26 EST -------
Well, the current amavisd-new package is very heavily tied to the way the fedora
clamav package is setup, and the maintainer (justly) doesn't want to try and
maintain two very different packages, one for fedora, one for epel. 

I guess if someone was willing to step up and maintain a amavisd-new spec that
works with this clamav that might work. Would that be acceptable to you Steve?

Otherwise, as much as I dislike the fedora clamav package, the easier course
seems to be to try and find someone willing to maintain it for epel and close
this version off. 

As for upgrades: 

- Anyone using the 0.88.4 version for epel already pretty much has a broken
setup. It's vulnerable to a number of security issues, and it doesn't even catch
many of the viruses anymore, since the functionality level is so old: 
WARNING: Current functionality level = 8, recommended = 21
I personally don't know anyone who uses this version. All the machines I
maintain use the dag version. Other folks I have talked to also use other 3rd
party repo versions. 

- There is a script available to convert old format conf files to new format. It
could be run in a post. 

- Sadly, the way the fedora package works means upgrading will get you back to
the same state as if you just installed the package, where it will not work
until you edit some config files. I don't see that as worse than having a
vulnerable/old/useless version however. Worst case, the package doesn't scan,
which is only slightly worse than running the 0.88.x version. 

Yes, the package would need to be updated a lot as upstream changes things. 
Sadly, thats just the way it would need to be IMHO. The config file format only
has changed once that I know of. 



-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.