Bug 164209

Summary: Packages for clamd incomplete
Product: [Fedora] Fedora Reporter: Stefan Neufeind <redhat>
Component: clamavAssignee: Enrico Scholz <rh-bugzilla>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 4CC: extras-qa, shiva
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-08-11 11:48:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Stefan Neufeind 2005-07-25 22:45:19 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6

Description of problem:
When trying to use clamd (the variant of clamav running with a server), imho the clamav-server-package is not "complete". I'm missing /etc/clamd.conf as well as an init.d-script for clamd. There are examples in the docs, however imho when you install the separately provided package clamav-server since you want to use clamd it might be a good idea to ship those files directly.

PS: Maybe this could be included in the next update for the current security-issue oon clamav?

Version-Release number of selected component (if applicable):
clamav-server-0.86.1-2.fc4

How reproducible:
Always

Steps to Reproduce:
1.Install clamav-server
2.Look for init-script or conf-file

Additional info:

Comment 1 Stefan Neufeind 2005-08-11 09:55:22 UTC
I'd like to stress that this issue currently keeps a few people I know from
upgrading. The consequence is that those systems still stick to 0.85 - with all
the security-problem-implications. Another security-advisory has been released
which strongly suggests upgrading to 0.86.2 already ...

Comment 2 Enrico Scholz 2005-08-11 10:50:13 UTC
It is not possible to provide *one* clamd. It must be instantiated per usecase
(e.g. service for amavisd, mimedefang, squidclam, ...).

So it does not make sense to ship template files with clamav-server as they have
to be modified heavily by the user.


I do not see how this would stop users from upgrading; the clamav package
*never* contained such a requested initscript or configuration file. So, users
can update safely from 0.85.


For more details, please see the thread at

http://listman.redhat.com/archives/fedora-extras-list/2005-July/msg01018.html
http://listman.redhat.com/archives/fedora-extras-list/2005-July/msg01029.html



Comment 3 Stefan Neufeind 2005-08-11 11:28:23 UTC
Just to give prove for my point ... Here clamd.conf and an init-script is included!


clamd-0.85.1-1.1.fc3.rf

/etc/clamd.conf
/etc/logrotate.d/clamav
/etc/rc.d/init.d/clamd
/usr/bin/clamdscan
/usr/sbin/clamd
/usr/share/doc/clamd-0.85.1
/usr/share/doc/clamd-0.85.1/clamd.conf
/usr/share/doc/clamd-0.85.1/clamdwatch
/usr/share/doc/clamd-0.85.1/clamdwatch/clamdwatch.tar.gz
/usr/share/man/man1/clamdscan.1.gz
/usr/share/man/man5/clamd.conf.5.gz
/usr/share/man/man8/clamd.8.gz
/var/clamav
/var/clamav/daily.cvd
/var/clamav/main.cvd
/var/log/clamav
/var/run/clamav

Comment 4 Enrico Scholz 2005-08-11 11:48:14 UTC
This package seems to be unrelated because 'clamd' was never been shipped.

The .spec for 0.85.1 can be found at

http://cvs.fedora.redhat.com/viewcvs/rpms/clamav/FC-3/clamav.spec?root=extras&rev=1.9&only_with_tag=clamav-0_85_1-1&view=auto

and I do not see a '%package -n clamd' there. The server part is in the
'clamav-server' subpackage.

Comment 5 Stefan Neufeind 2005-08-11 14:13:38 UTC
Isn't clamav-server the daemon-server-part that was the clamd-package before?

Comment 6 Enrico Scholz 2005-08-11 14:33:57 UTC
The server part was always in the -server subpackage. A 'clamd' package never
existed. Earliest traces (0.71) of clamav inclusive 'clamav-server' can be found at

http://cvs.fedora.redhat.com/viewcvs/rpms/clamav/FC-1/clamav.spec?root=extras&rev=1.1&view=markup

and the changelog indicates that the -server exists since 0.60-0.fdr.5.

Comment 7 Kenneth Porter 2005-11-09 07:53:24 UTC
It would be nice to have a subpackage that illustrates a sample clamd
installation, similar to the caching-nameserver configuration package for BIND.
For instance, create all files necessary for the mimedefang service and make a
clamav-server-mimedefang subpackage.