This one time, at band camp, Michael Gilbert said:
> will the boolean defaults be false for the heuristics?

In what I have seen, the options will be given the same defaults, but it
makes it easier to turn them off this way, at least.

Calling this test a heuristic is, also, not strictly speaking accurate.
It's a fairly simple algorithm:

if (((uncompressed_size/compressed_size) > limit) && size_limit) block;

Since it's an important DoS prevention test in the most common settings
that clamav is used in, I don't think it makes sense to disable it by
default.  I have forwarded this discussion upstream, but I don't really
expect them to change their minds.

I am happy to leave this bug open since I understand it causes problems
for people, but having an easy way to disable all the --block-foo stuff
will, in my opinion, make this sort of thing a non issue, as it will be
trivial for local policy to override all of the built in defaults.

Take care,
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        [EMAIL PROTECTED] |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------

Attachment: signature.asc
Description: Digital signature

Reply via email to