On Friday 15 April 2005 14:21, Tomasz Kojm wrote:
> On Fri, 15 Apr 2005 13:58:05 +0300
> Denis Vlasenko <[EMAIL PROTECTED]> wrote:
> 
> > Hello.
> > 
> > I wanted to compile clamav so that it does not change it's user
> > identity, so I supplied --without-user --without-group to configure.
> > 
> > Apparently it trets this like --with-user=no, that is,
> > "use user with name 'no'". Wow 8(
> > 
> > I patched the source and disabled changing user/group altogether.
> > Will such patch be accepted into 'official' clamav?
> 
> No.
>
> > Alternatively, please enlighten me why this feature is useful.
> > So far I don't see any benefits.
> 
> RTM.

Which one?

I've read FAQ linked from homepage
(http://www.clamav.net/faq.html)
and one in wiki (http://wiki.clamav.net/index.php/FrequentlyAskedQuestions)
Found no answer there.

In http://www.clamav.net/doc/0.84rc1/clamdoc.pdf:

>3.2 Installing on a shell account
>To install ClamAV on a shell account (e.g. on some shared host)
>you need not create any additional users or groups. Assuming your
>home directory is /home/gary you should build it as follows:
>$ ./configure --prefix=/home/gary/clamav --disable-clamav
>$ make; make install
>To test your installation execute:
>$ ~/clamav/bin/freshclam
>$ ~/clamav/bin/clamscan 
>The --disable-clamav switch disables testing for the existence of
>the clamav user and group but clamscan would still require
>an unprivileged account to work in a superuser mode.

Why?

>3.3 Adding new system user and group
>If you are installing ClamAV for the first time, you have
>to add a new user and group to your system: 3
># groupadd clamav
># useradd -g clamav -s /bin/false -c "Clam AntiVirus" clamav

Again, why?

Is it a security feature?
--
vda

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html

Reply via email to