[K12OSN] USB Stick on demand virus scanning

Huck dhuckaby at paasda.org
Tue Mar 15 17:12:03 UTC 2011


Barry,

I manage 3 smaller private schools(240 kids in the largest, 100 in 
smallest)...but maintain about 250 machines total...and I still haven't 
found a GOOD(read 'easy') way to do this...the best solution so far has
ended up being locking down profiles in the most draconian of 
fashions...so NO executables run except from a specific location...and 
users have no access to WRITE to this specific location so malware/etc, 
can't install itself...(these are general workstations)...

on the flip side, the organization these schools belong to in their 
infinite wisdom require the use of an Accounting program that demands 
the use to be a system administrator(read: nightmare and irresponsible 
programming)...so there are about 10 machines of the 250 which I have to 
constantly scan and clean, and take up a lot of time...

There may be some OpenSource solution for this that I'm unaware of, and 
recall FOG having some sort of an 'auto-install' module for ClamAV but 
have not had time to even look into it..

For what it's worth...

--Huck

On 03/10/11 1:40 PM, Barry Cisna wrote:
> Hello All,
>
> This is somewhat off topic here,and I am guessing this may be a tough
> nut to crack. I am going to ask anyways.
> I would like to come up with some sort of usb stick 'on demand' scanning
> that utilizes Clamav,Samba,and the samba-vscan-clamav module. I have
> posted this in the Clamav forums and got one reply which really wasn't a
> turn key setup like I would like it to be.
> I am for sure not smart enough to come up with some sort of script that
> would in effect auto mount an usb stick that was inserted into any
> Winders workstation that was domain logged in and scan this newly seen
> drive with the samba-vscan module and would function in the same manner
> as samba-vscan-clamav works. We are at present using the
> samba-vscan-clamav module which works sweet on all users home folders
> that resides on one of the K12ltsp servers.
> It appears to me that if this could happen this would be a 'one point'
> manageable piece.
> Some years back we went with the AVG Enterprise thing which worked OK,
> but still doing updates and the licensing nightmares with this type of
> thing is a daunting task.
> We have recently got hit with a virus propagating out to all of the
> Winders machines,as the admins have been buying laptops by the carload
> and of course the usb stick thing is just a matter of time and this sort
> of thing is bound to happen.
> Possibly someone could chime in with what they use.
>
> Thanks,
> Barry
>
>
>
>
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see<http://www.k12os.org>
>
>




More information about the K12OSN mailing list