Red Hat Bugzilla – Bug 164209
Packages for clamd incomplete
Last modified: 2007-11-30 17:11:10 EST
From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6 Description of problem: When trying to use clamd (the variant of clamav running with a server), imho the clamav-server-package is not "complete". I'm missing /etc/clamd.conf as well as an init.d-script for clamd. There are examples in the docs, however imho when you install the separately provided package clamav-server since you want to use clamd it might be a good idea to ship those files directly. PS: Maybe this could be included in the next update for the current security-issue oon clamav? Version-Release number of selected component (if applicable): clamav-server-0.86.1-2.fc4 How reproducible: Always Steps to Reproduce: 1.Install clamav-server 2.Look for init-script or conf-file Additional info:
I'd like to stress that this issue currently keeps a few people I know from upgrading. The consequence is that those systems still stick to 0.85 - with all the security-problem-implications. Another security-advisory has been released which strongly suggests upgrading to 0.86.2 already ...
It is not possible to provide *one* clamd. It must be instantiated per usecase (e.g. service for amavisd, mimedefang, squidclam, ...). So it does not make sense to ship template files with clamav-server as they have to be modified heavily by the user. I do not see how this would stop users from upgrading; the clamav package *never* contained such a requested initscript or configuration file. So, users can update safely from 0.85. For more details, please see the thread at http://listman.redhat.com/archives/fedora-extras-list/2005-July/msg01018.html http://listman.redhat.com/archives/fedora-extras-list/2005-July/msg01029.html
Just to give prove for my point ... Here clamd.conf and an init-script is included! clamd-0.85.1-1.1.fc3.rf /etc/clamd.conf /etc/logrotate.d/clamav /etc/rc.d/init.d/clamd /usr/bin/clamdscan /usr/sbin/clamd /usr/share/doc/clamd-0.85.1 /usr/share/doc/clamd-0.85.1/clamd.conf /usr/share/doc/clamd-0.85.1/clamdwatch /usr/share/doc/clamd-0.85.1/clamdwatch/clamdwatch.tar.gz /usr/share/man/man1/clamdscan.1.gz /usr/share/man/man5/clamd.conf.5.gz /usr/share/man/man8/clamd.8.gz /var/clamav /var/clamav/daily.cvd /var/clamav/main.cvd /var/log/clamav /var/run/clamav
This package seems to be unrelated because 'clamd' was never been shipped. The .spec for 0.85.1 can be found at http://cvs.fedora.redhat.com/viewcvs/rpms/clamav/FC-3/clamav.spec?root=extras&rev=1.9&only_with_tag=clamav-0_85_1-1&view=auto and I do not see a '%package -n clamd' there. The server part is in the 'clamav-server' subpackage.
Isn't clamav-server the daemon-server-part that was the clamd-package before?
The server part was always in the -server subpackage. A 'clamd' package never existed. Earliest traces (0.71) of clamav inclusive 'clamav-server' can be found at http://cvs.fedora.redhat.com/viewcvs/rpms/clamav/FC-1/clamav.spec?root=extras&rev=1.1&view=markup and the changelog indicates that the -server exists since 0.60-0.fdr.5.
It would be nice to have a subpackage that illustrates a sample clamd installation, similar to the caching-nameserver configuration package for BIND. For instance, create all files necessary for the mimedefang service and make a clamav-server-mimedefang subpackage.