Re: [clamav-users] Whitelisting extensions for virus scan

2018-10-30 Thread Tilman Schmidt
Am 29.10.18 um 17:33 schrieb Kris Deugau: > Tilman Schmidt wrote: >> Am 26.10.18 um 15:34 schrieb Johnny Time: >>> For exemple, we wanted to authorize only a white list which contains >>> *.doc,*.xls,*.pdf and ban the others extensions. >> >> Surely you meant to write "*.docx,*.xlsx,*.pdf"? >> *.do

Re: [clamav-users] Whitelisting extensions for virus scan

2018-10-30 Thread Kris Deugau
Tilman Schmidt wrote: Am 29.10.18 um 17:33 schrieb Kris Deugau: Tilman Schmidt wrote: Am 26.10.18 um 15:34 schrieb Johnny Time: For exemple, we wanted to authorize only a white list which contains *.doc,*.xls,*.pdf and ban the others extensions. Surely you meant to write "*.docx,*.xlsx,*.pdf

Re: [clamav-users] Structuring instream calls to clamd

2018-10-30 Thread Micah Snyder (micasnyd)
Hi Alex, I don't like seeing a well researched question go un-answered, though I don't have a very good answer for you. We don't have any documentation from any previous work to say if there is an optimum chunk size for TCP sockets or unix sockets. Intuitively, if you're using a TCP socket, p

Re: [clamav-users] Structuring instream calls to clamd

2018-10-30 Thread Wreschnig, Alexander Scott
Thanks for the response, Micah. If the benefits are, indeed, unclear, then I probably won't be futzing much with a perfectly functional implementation in the near future--but if I do any experiments, I'll be sure to share the results. - Alex From: clamav-users o

[clamav-users] ClamAV 0.101.0 beta has been posted!

2018-10-30 Thread Joel Esler (jesler)
Welcome to the ClamAV 0.101.0 beta! Important notes about this release: • Changes to the libclamav API: • Those who build applications around our shared library will need to change how they declare and pass scanning options to libclamav. Please take a look at the change to our example code

[clamav-users] How do I know when new versions contain .conf file changes?

2018-10-30 Thread Brian Fluet
I use ClamAV for Win32 and am wondering if there is a way to tell when an update contains a change to either of the .conf files so as to know when it's ok to stay with the existing ones. Thanks. Brian Fluet ___ clamav-users mailing list clamav-use

Re: [clamav-users] How do I know when new versions contain .conf file changes?

2018-10-30 Thread Eric Tykwinski
My suggestion would be to check out the release notes on GitHub for your specific version: https://github.com/Cisco-Talos/clamav-devel/commits/rel/0.100 Depends though on if you are running Talos, or ClamWin. Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300 > -Original Message- >

[clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

2018-10-30 Thread Doug Ingham
Hi all, For some reason, clamdscan is returning a permissions error for files it has read access to. I've copied some output below to help show the situation... == root@arquivos0:/var/www# grep User /etc/clamav/clamd.conf User clamav root@arquivos0:/v

Re: [clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

2018-10-30 Thread SCOTT PACKARD
You'd want to: ls -ld / ls -ld /var ls -ld /var/www l s-ld /var/www/nc_data and make sure user www-data has at least read and execute permissions to the parent directories. You probably have removed read and execute from other, so clamdscan can't go down in the directory hierarchy to get to /var/

Re: [clamav-users] How do I know when new versions contain .conf file changes?

2018-10-30 Thread Brian Fluet
Thanks for the url to the release notes. I'm using the Win32 package from clamav.net in conjunction with Mercury Mail Transport System which passes messages to clamd. -- Brian Fluet ___ clamav-users mailing list clamav-users@lists.clamav.net http:/

Re: [clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

2018-10-30 Thread Scott Kitterman
Apparmor/SE Linux is another possibility. Scott K On October 30, 2018 9:29:28 PM UTC, SCOTT PACKARD wrote: >You'd want to: >ls -ld / >ls -ld /var >ls -ld /var/www >l s-ld /var/www/nc_data >and make sure user www-data has at least read and execute permissions >to the parent directories. >You pro

Re: [clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

2018-10-30 Thread Doug Ingham
>and make sure user www-data has at least read and execute permissions If www-data didn't have r/w access to that directory, my site would be broken! >From the (redacted) comand output I copied above: >> root@arquivos0:/var/www# sudo -u clamav ls nc_data/ >> [correct directory contents listed]

Re: [clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

2018-10-30 Thread Scott Kitterman
On Tuesday, October 30, 2018 07:01:40 PM Doug Ingham wrote: > >and make sure user www-data has at least read and execute permissions > > If www-data didn't have r/w access to that directory, my site would be > broken! > > From the (redacted) comand output I copied above: > >> root@arquivos0:/var

Re: [clamav-users] How do I know when new versions contain .conf file changes?

2018-10-30 Thread Eric Tykwinski
Brian, That would be Cisco direct, so the URL would be fine. ClamWin has some modifications, though I don’t know how much they differ. I’ve got an Exchange MTA running Jam software, and I think they use clamwin, but I rely on them for updates which are usually several versions behind. Sincerel