On Mon, 6 Oct 2008, Bernd Petrovitsch wrote:
> What could be more obvious than simply stopping to work?

Why do they have an 'oil light' in cars? When your oil gets too low, the
vehicle doesn't stop running. It keeps going, even though it is tearing
the insides of the engine apart from lack of lubrication. By the time you
realize you have a problem, you've got a BIG problem.

> The root cause of the whole problem is: Don't take it personally but I
> won't let such "users" install or upgrade software if they don't even
> remotely check afterwards that the upgrade/install worked[0]?

If I was the proverbial SA in a large company that can only check each of
the hundreds of systems in my care once a month, and apply updates in a
meticulous and careful fashion, I would be derelict in not getting that
new clamd engine installed as soon as it is needed to catch that new
'kind' of virus for which it was updated. So even if I installed all other
packages as you describe, with careful review and manual testing, I would
*want* my AV package to update as *quickly* as possible.

This is *not* a problem solved by slowing down the upgrade process to a
speed that allows a diligent SA to 'catch' errors introduced by changes.
This is a problem solved by better notification mechanisms.

> Please remember that the whole thread started with "it breaks after an
> upgrade of ClamAV".

Yes. And the answer is, it should NOT break. No update should break
something. All changes should be backwards compatible one level. But that
may not be realistic. So a simple workaround for SA's who can't monitor a
situation carefully, would be to have a notification mechanism. 

> > They could go for *weeks* not knowing their ClamAV has failed silently.
> BTW if they don't notice for weeks, it probably wasn't not that
> important though. Again no point ....

Say that to the person who called me up with a virus today. Now how did
*that* get through? I do manual updates on my.... oh, crud. I'm at 0.93
and its been updated again.... oh, well. So much for doing manual
updates. I'll be so glad when I get on the new system with automated
updates. (ironic laugh)

- Charles

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to