Hi there, On Tue, 19 Apr 2022, Enver Bahar via clamav-users wrote:
I tried before but didn't get a response, any directions would be great: I read on some forums that ClamAV is approved for federal use and approved by DoD for IL4 - is that correct? If so, where can I find such information?
I didn't respond before because I don't have much to say that might help you, but as you've asked again I'll give you what I know, which I'm afraid is very little. I've been using ClamAV for a couple of decades and AFAICR you're the first to ask this question on the mailing list. The first time I saw your question I did a quick search, and nothing I found seemed to be supportive of statements that "ClamAV is approved" by any particular government organization. However if you look at https://cloud.gov/docs/ops/repos/ you will see the ClamAV is at least in use in US government circles. This sort of thing will often be misunderstood by people carelessly posting information of dubious quality on SomeInternetForumOrOther. If it's important to you, as has been said you'd probably be best advised to talk to the relevant government departments directly. I think there'll be a lot more to it than "Clamav is approved for...", because ClamAV can only ever be one small part of a whole system whose security really must be assessed as a whole - not piecemeal. ClamAV can be used intelligently and carefully, or it can be (and frankly I think very often is) used thoughtlessly. I suspect that the latter wouldn't make a good impression at the DoD. Rather than a blanket "yes, it's approved" you're far more likely to find yourself wading through things like this https://dl.dod.cyber.mil/wp-content/uploads/devsecops/pdf/DevSecOps_Enterprise_Container_Image_Creation_and_Deployment_Guide_2.6-Public-Release.pdf which I mention here not because it seems outstandingly relevant, but because it reminds me of a friend who, long ago, expressed the opinion that "an elephant is a greyhound, built to government specifications". At that time I was working for our government, it did make me laugh. :) -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
