Henrik, all:

Alberto Wu, a former ClamAV core developer, has very kindly provided a patch to 
us today that he created to perform clamd database reloads in a separate 
thread.  I have attached his work, with some minor tweaks on my part, to the 
relevant Bugzilla ticket, here: 
https://bugzilla.clamav.net/show_bug.cgi?id=10979#c19  
This patch applies to the current head of dev/0.102 of our Github repository: 
https://github.com/Cisco-Talos/clamav-devel Thank so much Alberto for 
submitting the patch.  We would appreciate feedback from any who are willing 
and able to test the new feature. 

Regarding the conversation below...  We don't mind nudging or even a little 
nagging.  In fact, hearing from a wide number of community members on specific 
issues is the best way for us to know which bugs or features most need our 
attention.  That said, do not confuse the fact that we are paid with the 
thought that you are paying us.  We have a variety of customers both internal 
and external and we must prioritize our limited resources to both fix known 
issues and add new features for all of our users.  We of course always 
appreciate help from the community, such as the clamd database reloading 
feature patch above. 

Respectfully,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
 


On 8/31/19, 12:54 PM, "clamav-users on behalf of Scott Kitterman via 
clamav-users" <clamav-users-boun...@lists.clamav.net on behalf of 
clamav-users@lists.clamav.net> wrote:

    
    
    On August 31, 2019 4:32:00 PM UTC, Henrik K <h...@hege.li> wrote:
    >On Sat, Aug 31, 2019 at 12:21:11PM -0400, Scott Kitterman via
    >clamav-users wrote:
    >>
    >> Not to put too fine a point on it, but if you are unhappy with the
    >service you 
    >> are receiving, you should switch to a different vendor.  I suspect
    >it's 
    >> unlikely you'll get the same value for money elsewhere.
    >
    >Does this worn cliche really need posting? :-)
    >
    >But hey, I'm just participating in the community..  sometimes things
    >just
    >need a bit of nudging.  I wouldn't even continue to nag about it, if
    >this
    >was a basic volunteer project.  But we are talking about a security
    >company
    >that should be proud of it's code.
    
    There's no problem with nudging, but being nasty about isn't appropriate.  
I'll confess that I aimed a comment at you that should have been pointed at the 
OP.  Sorry about that.
    
    I've been maintaining clamav packages for over a decade through three 
different companies owning the project and overall I think the Talos/Cisco 
people are doing a pretty good job.
    
    They are generally responsive.
    
    Also, in terms of being proud of their code, you should compare the code 
quality when Sourcefire bought clamav to the current code base.  It's night and 
day different.  Also the rate of security bugs seems to have dropped off (not 
to mention we actually get bugfix releases now).
    
    So yeah, they could do better, but looking back, I think they're doing 
pretty good.
    
    In this case, the 'worn cliche' is important, because unlike lots of other 
FOSS projects, this one doesn't have non-proprietary alternatives, so it'd be 
pretty awful if the community were to convince Talos that publishing it was 
more trouble than it was worth.
    
    Scott K
    
    _______________________________________________
    
    clamav-users mailing list
    clamav-users@lists.clamav.net
    https://lists.clamav.net/mailman/listinfo/clamav-users
    
    
    Help us build a comprehensive ClamAV guide:
    https://github.com/vrtadmin/clamav-faq
    
    http://www.clamav.net/contact.html#ml
    


_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to