On Sat, Oct 09, 2004 at 04:37:14PM +0100, paddy wrote: > On Sat, Oct 09, 2004 at 10:43:05AM -0400, Stephen Gran wrote: > > This one time, at band camp, Kevin Mark said: > > > On Sat, Oct 09, 2004 at 11:00:51AM +0200, Francesco Paolo Lovergine wrote: > > > > On Sat, Oct 09, 2004 at 03:01:11AM -0400, Kevin Mark wrote: > > > > > Packages like virus checkers seem to be > > > > > composed of 2 parts: the app program and the data where the data in > > > > > this case are virus sigs and the app is say clamav. And the 'volitile' > > > > > part is the virus sigs whereas the app (once it hits stable) shouldnt > > > > > change unless it warrents a 'security' update. So, volitile should be > > > > > for the data/virus sigs that need updating when new bugs hit the 'net. > > > > > > > > No, often such kind of programs need engine update. That's true for > > > > both AV and antispam programs as well. > > > > > > > Hi Francesco, > > > so: > > > the program = engine part + (some un-named part) ??? > > > and the engine part and the data part are volitile > > > <snip> > > > > Right now, it is easy enough to get new data sets - the clamav suite > > inculdes an updater for it's data, and spamassassin is easy to add new > > rules to. The problem is updating the engine in a stable release. > > Indeed, there is a consensus that data updates with the volatility > of, say, virus scanner sigs belong firmly out-of-band.
Hi Paddy, so that leaves libs and frontends (at least for clamav) but I thought the ideas was to protect against virus threats? if its out-of-band (not in debian control) than the only thing that would seem reasonable is to convert between any new data format and the data format used in stable. current stable= no changes to package = stable system with security left to user with volitile=backport data format= stable system with some new data to improve security somewhat with volitile=backport lib, frontends,data?= possible unstable system with possibly up-to-data security Dont take the above as anything other than my overexagerated guess. I'm just thinking it through to see if I can squeeze this into me wee brain! -Kev -- (__) (oo) /------\/ / | || * /\---/\ ~~ ~~ ...."Have you mooed today?"...
signature.asc
Description: Digital signature