Hi,

On Sun, May 22, 2005 at 07:32:07PM -0400, Stephen Gran wrote:
> In the more general sense, I feel a little like you're trying to squeeze
> freshclam into a more general purpose than it was really designed to be.

Wasn't it designed to download clamav databases?

> You can achieve all of the things freshclam does with host/dig, wget and
> sigtool, none of which need any priviledges, or access to a config file,
> and have the side efect of doing the one thing they do very well.

That would, however, mean re-inventing the wheel and having to track
upstream changes to database distribution policy. And it would break
when upstream decides to change its mechanisms. clamav-freshclam is a
documented API to obtaining current databases.

> This
> would effectively meet the needs you've outlined here, and in #236829 and
> #234926.

234926 could be confusing in the normal usage scenario. I somewhat
agree with your judgment on #236839.

> I am not trying to change your mind, you understand, just
> pointing out that these 'bugs' are more problems of trying to general-
> purpose a very single purpose tool.

Is it really bad to do minor changes to a tool to make it more general
while it can still fulfil its single purpose?

> > In my opinion, freshclam.conf should be world readable by default,
> > with the documented option for people who use proxy authentication
> > that the permissions on freshclam.conf need to be tightened _then_.
> > But I think that having the permissions on freshclam.conf _that_ tight
> > is way over the top.
> > 
> > Please reconsider.
> 
> I may, but I have to think of a reasonable way to handle this.  Will
> get back to you on this.  Take care,

In the mean time, I am pondering to deliver a suid clamav wrapper for
freshclam with clamav-getfiles.

It is at least a bad bug that freshclam doesn't detect the ENOPERM,
but instead complains about an unconfigured database mirror.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to