[Pkg-clamav-devel] Bug#521661: clamav-daemon: debconf questions

Sun Mar 29 09:44:08 UTC 2009

Package: clamav-daemon
Version: 0.95+dfsg-1
Severity: minor

The following configuration options don't have a corresponding debconf question:
DetectPUA/ExcludePUA/IncludePUA

Maybe this question should be asked at priority low.

Also the wording for this debconf question "Do you want to enable mail
scanning?" [1] makes you believe that ClamAV is not able to extract MIME parts
correctly. This is no longer the case (and hasn't been for quite some time).

In fact turning off ScanMail turns off all type 4 signatures, and url-based
heuristic phishing detection. I think the debconf question shouldn't recommend
turning off ScanMail.

[1] "It is recommended that you use a separate unpacker to extract any MIME parts of email messages if you want
to scan email."

-- Package-specific info:
--- configuration ---
ClamAV engine version: 0.95
Checking configuration files in /usr/local/etc

Config file: clamd.conf
-----------------------
LogFile = "/tmp/clamd.log"
LogFileUnlock disabled
LogFileMaxSize = "1048576"
LogTime = "yes"
LogClean = "yes"
LogVerbose = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
PidFile = "/tmp/clamd.pid"
TemporaryDirectory disabled
DatabaseDirectory = "/usr/local/share/clamav"
LocalSocket = "/tmp/clamd.socket"
FixStaleSocket = "yes"
TCPSocket = "3310"
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "26214400"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "10"
ReadTimeout = "120"
CommandReadTimeout = "5"
SendBufTimeout = "500"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath = "^/proc/", "^/sys/", "^/tmp/"
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
SelfCheck = "10"
VirusEvent disabled
ExitOnOOM disabled
Foreground = "yes"
Debug disabled
LeaveTemporaryFiles disabled
User = "clamav"
AllowSupplementaryGroups disabled
DetectPUA = "yes"
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail = "yes"
MailFollowURLs disabled
ScanPartialMessages disabled
PhishingSignatures disabled
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
ScanPDF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "16"
MaxFiles = "10000"
ClamukoScanOnAccess disabled
ClamukoScanOnOpen disabled
ClamukoScanOnClose disabled
ClamukoScanOnExec disabled
ClamukoIncludePath disabled
ClamukoExcludePath disabled
ClamukoMaxFileSize = "5242880"
DevACOnly disabled
DevACDepth disabled

Config file: freshclam.conf
---------------------------
LogFileMaxSize = "2097152"
LogTime = "yes"
LogVerbose = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
PidFile disabled
DatabaseDirectory = "/usr/local/share/clamav"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/tmp/freshclam.log"
DatabaseOwner = "clamav"
Checks = "12"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.ro.clamav.net", "database.clamav.net"
MaxAttempts = "3"
ScriptedUpdates = "yes"
CompressLocalDatabase disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/usr/local/etc/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats = "/usr/local/etc/clamd.conf"
DetectionStatsCountry disabled
SafeBrowsing = "yes"

Config file: clamav-milter.conf
-------------------------------
LogFile = "/tmp/clamav-milter.log"
LogFileUnlock disabled
LogFileMaxSize = "1048576"
LogTime disabled
LogVerbose = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
PidFile disabled
TemporaryDirectory disabled
FixStaleSocket = "yes"
MaxThreads = "10"
ReadTimeout = "120"
Foreground disabled
User disabled
AllowSupplementaryGroups disabled
MaxFileSize = "26214400"
ClamdSocket = "tcp:127.0.0.1:3310"
MilterSocket = "local:/var/spool/postfix/clamav/clamav-milter.socket"
LocalNet disabled
OnClean = "Accept"
OnInfected = "Quarantine"
OnFail = "Defer"
RejectMsg disabled
AddHeader = "yes"
Chroot disabled
Whitelist disabled
LogInfected disabled

--- data dir ---
total 21952
-rw-r--r-- 1 clamav clamav  2376192 2009-03-29 12:13 daily.cld
-rw-r--r-- 1 clamav clamav 20091559 2009-03-29 12:13 main.cvd
-rw------- 1 clamav clamav       52 2009-03-29 12:18 mirrors.dat

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.28.7 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages clamav-daemon depends on:
ii  clamav-base            0.95+dfsg-1       anti-virus utility for Unix - base
ii  clamav-freshclam [clam 0.95+dfsg-1       anti-virus utility for Unix - viru
ii  libbz2-1.0             1.0.5-1           high-quality block-sorting file co
ii  libc6                  2.9-4             GNU C Library: Shared libraries
ii  libclamav6             0.95+dfsg-1       anti-virus utility for Unix - libr
ii  libltdl3               1.5.26-4          A system independent dlopen wrappe
ii  libtommath0            0.39-3            multiple-precision integer library
ii  lsb-base               3.2-20            Linux Standard Base 3.2 init scrip
ii  ucf                    3.0016            Update Configuration File: preserv
ii  zlib1g                 1:1.2.3.3.dfsg-12 compression library - runtime

clamav-daemon recommends no packages.

Versions of packages clamav-daemon suggests:
pn  clamav-docs                   <none>     (no description available)
pn  daemon                        <none>     (no description available)

-- no debconf information