Comments on: ClamFS 1.0.0 has been released http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/ Create. Break. Fix. Repeat. Wed, 18 Jan 2012 21:08:18 +0000 hourly 1 http://wordpress.org/?v= By: Stephen http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-1248 Stephen Wed, 28 Dec 2011 12:43:00 +0000 http://www.burghardt.pl/?p=273#comment-1248 I've just gotten clamfs working on tinycore 4.1 after a bit of mucking around. While testing with the eicar.com test virus file I discovered that I can not copy the test virus file to the mountpoint on the linux system, however I've also setup a samba share to use the same mountpoint folder, and I can copy the test virus file to that share from a windows computer. Suggestions welcome. I’ve just gotten clamfs working on tinycore 4.1 after a bit of mucking around.

While testing with the eicar.com test virus file I discovered that I can not copy the test virus file to the mountpoint on the linux system, however I’ve also setup a samba share to use the same mountpoint folder, and I can copy the test virus file to that share from a windows computer.

Suggestions welcome.

]]> By: ivan_at_uadm http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-1233 ivan_at_uadm Wed, 22 Jun 2011 10:23:09 +0000 http://www.burghardt.pl/?p=273#comment-1233 Hi, have problem with connection to clamav: 14:16:52 (clamav.cxx:59) [tid:34389115328] attempt to open control connection to clamd via /var/run/clamav/clamd.sock 14:16:52 (clamav.cxx:63) [tid:34389115328] error: cannot connect to clamd my own DEBUG STRING 14:16:52 (clamav.cxx:63) [tid:34389115328] Try read error 12 (errConnectFailed) 14:16:52 (clamav.cxx:90) [tid:34389115328] closing clamd connection 14:16:52 (clamfs.cxx:1063) [tid:34389115328] cannot start without running clamd, make sure it work at same time socat - UNIX-CONNECT:/var/run/clamav/clamd.sock PING PONG work perfectly Using FreeBSD 8.2 amd64 Hi, have problem with connection to clamav:
14:16:52 (clamav.cxx:59) [tid:34389115328] attempt to open control connection to clamd via /var/run/clamav/clamd.sock
14:16:52 (clamav.cxx:63) [tid:34389115328] error: cannot connect to clamd
my own DEBUG STRING 14:16:52 (clamav.cxx:63) [tid:34389115328] Try read error 12 (errConnectFailed)
14:16:52 (clamav.cxx:90) [tid:34389115328] closing clamd connection
14:16:52 (clamfs.cxx:1063) [tid:34389115328] cannot start without running clamd, make sure it work

at same time
socat – UNIX-CONNECT:/var/run/clamav/clamd.sock
PING
PONG

work perfectly
Using FreeBSD 8.2 amd64

]]> By: Robert http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-1229 Robert Fri, 03 Jun 2011 13:33:06 +0000 http://www.burghardt.pl/?p=273#comment-1229 Witam Czy jest jakaś szansa/nadzieja na dodanie funkcji przesuwania plików do kwarantanny lub usuwania ? :) Witam
Czy jest jakaś szansa/nadzieja na dodanie funkcji przesuwania plików do kwarantanny lub usuwania ? :)

]]> By: Krzysztof Burghardt http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-277 Krzysztof Burghardt Tue, 24 Nov 2009 19:47:56 +0000 http://www.burghardt.pl/?p=273#comment-277 Removing infected files automatically can be problematic in case of false positives. I plan to implement moving files to quarantine. You can always remove them by hand. If you want to mount clamfs on /home, firstly mount your current /home into /home_unprotected. Finally set up clamfs with options: <code> <filesystem root="/home_unprotected" mountpoint="/home" public="yes" /> </code> Removing infected files automatically can be problematic in case of false positives. I plan to implement moving files to quarantine. You can always remove them by hand.

If you want to mount clamfs on /home, firstly mount your current /home into /home_unprotected. Finally set up clamfs with options:

<filesystem root="/home_unprotected" mountpoint="/home" public="yes" />
]]> By: Pascal http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-276 Pascal Tue, 24 Nov 2009 09:32:31 +0000 http://www.burghardt.pl/?p=273#comment-276 Hello, i'm trying to make work this solution wich seems to be very usefull the problem i meet is that i dont know how to remove infected file the clamd conf file doesnt permit remove infected file and clamf.xml no more what could be the solution to remove infected file when it's found Another question from newbie i'm : i plan use clamfs with samba, does that mean that the "new" home directory of a user is the clamfs one ? i mean, if before the home directory of toto was /home/toto, if i configure clamfs to mount /home on /home-clamfs-home the "new" home directory of toto will be /home-clamfs/toto ? thanks for your answers Hello,
i’m trying to make work this solution wich seems to be very usefull
the problem i meet is that i dont know how to remove infected file
the clamd conf file doesnt permit remove infected file and clamf.xml no more
what could be the solution to remove infected file when it’s found

Another question from newbie i’m : i plan use clamfs with samba, does that mean that the “new” home directory of a user is the clamfs one ?
i mean, if before the home directory of toto was /home/toto, if i configure clamfs to mount /home on /home-clamfs-home the “new” home directory of toto will be /home-clamfs/toto ?

thanks for your answers

]]> By: Krzysztof Burghardt http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-275 Krzysztof Burghardt Sun, 22 Nov 2009 13:13:26 +0000 http://www.burghardt.pl/?p=273#comment-275 Poprawka wejdzie oczywiście do najbliższego wydania, ale nie mogę zagwarantować, że nastąpi ono szybko. Jako tymczasowe rozwiązanie polecam patcha. Poprawka wejdzie oczywiście do najbliższego wydania, ale nie mogę zagwarantować, że nastąpi ono szybko. Jako tymczasowe rozwiązanie polecam patcha.

]]> By: miro http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-274 miro Sun, 22 Nov 2009 12:41:07 +0000 http://www.burghardt.pl/?p=273#comment-274 Dzięki za info! To jeszcze szybkie pytanie, planujesz zapakowanie tego w wersję np. 1.0.1? Czy po prostu mam zrobić patcha, który będzie nakładany przez ebuilda (aż do wyjścia kolejnej wersji) ? Pozdrawiam Dzięki za info!
To jeszcze szybkie pytanie, planujesz zapakowanie tego w wersję np. 1.0.1? Czy po prostu mam zrobić patcha, który będzie nakładany przez ebuilda (aż do wyjścia kolejnej wersji) ?
Pozdrawiam

]]> By: Krzysztof Burghardt http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-273 Krzysztof Burghardt Sun, 22 Nov 2009 12:28:12 +0000 http://www.burghardt.pl/?p=273#comment-273 Poprawka znajduje się już w <a href="http://clamfs.svn.sourceforge.net/" rel="nofollow">repozytorium SVN</a> jako <a href="http://clamfs.svn.sourceforge.net/viewvc/clamfs?view=rev&revision=85" rel="nofollow">wersja r85</a>. Poprawka znajduje się już w repozytorium SVN jako wersja r85.

]]> By: miro http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-272 miro Fri, 20 Nov 2009 23:38:57 +0000 http://www.burghardt.pl/?p=273#comment-272 Cześć! Mam problem z kompilacją clamfs, gcc 4.4.2: clamfs.cxx: In function 'char* clamfs::fixpath(const char*)': clamfs.cxx:88: warning: ignoring return value of 'int fchdir(int)', declared with attribute warn_unused_result clamfs.cxx: In function 'int clamfs::clamfs_open(const char*, fuse_file_info*)': clamfs.cxx:529: error: invalid conversion from 'const char*' to 'char*' make[2]: *** [clamfs.o] Błąd 1 make[2]: Opuszczenie katalogu `/var/tmp/portage/sys-fs/clamfs-1.0.0/work/clamfs-1.0.0/src' make[1]: *** [all-recursive] Błąd 1 make[1]: Opuszczenie katalogu `/var/tmp/portage/sys-fs/clamfs-1.0.0/work/clamfs-1.0.0' make: *** [all] Błąd 2 Czy istnieje szansa na wersję poprawkową? ;) Pozdrawiam Cześć!
Mam problem z kompilacją clamfs, gcc 4.4.2:

clamfs.cxx: In function ‘char* clamfs::fixpath(const char*)’:
clamfs.cxx:88: warning: ignoring return value of ‘int fchdir(int)’, declared with attribute warn_unused_result
clamfs.cxx: In function ‘int clamfs::clamfs_open(const char*, fuse_file_info*)’:
clamfs.cxx:529: error: invalid conversion from ‘const char*’ to ‘char*’
make[2]: *** [clamfs.o] Błąd 1
make[2]: Opuszczenie katalogu `/var/tmp/portage/sys-fs/clamfs-1.0.0/work/clamfs-1.0.0/src’
make[1]: *** [all-recursive] Błąd 1
make[1]: Opuszczenie katalogu `/var/tmp/portage/sys-fs/clamfs-1.0.0/work/clamfs-1.0.0′
make: *** [all] Błąd 2

Czy istnieje szansa na wersję poprawkową? ;)
Pozdrawiam

]]> By: Sven Dreyer http://blog.burghardt.pl/2009/02/clamfs-100-has-been-released/#comment-271 Sven Dreyer Fri, 14 Aug 2009 14:57:45 +0000 http://www.burghardt.pl/?p=273#comment-271 first of all: a very impressive tool! after a few days of use i noticed, that it does not respect setgid directories. i have a directory named "files": $ ls -ld files drwxrws--- 2 sven localusers 4096 14. Aug 16:51 files if i touch a file in there (as root)... # touch testfile ...it should look like this: $ ls -l testfile -rw-r--r-- 1 root localusers 0 14. Aug 16:54 foo but in fact, it looks like this: $ ls -l testfile -rw-r--r-- 1 root root 0 14. Aug 16:54 foo the setgid-flag for the directory is ignored. if i try it outside a clamfs-directory, it works. am i missing a configuration option or is this a bug in fuse or clamfs? regards, sven first of all: a very impressive tool!

after a few days of use i noticed, that it does not respect setgid directories.

i have a directory named “files”:
$ ls -ld files
drwxrws— 2 sven localusers 4096 14. Aug 16:51 files

if i touch a file in there (as root)…
# touch testfile

…it should look like this:
$ ls -l testfile
-rw-r–r– 1 root localusers 0 14. Aug 16:54 foo

but in fact, it looks like this:
$ ls -l testfile
-rw-r–r– 1 root root 0 14. Aug 16:54 foo

the setgid-flag for the directory is ignored. if i try it outside a clamfs-directory, it works.

am i missing a configuration option or is this a bug in fuse or clamfs?

regards,
sven

]]>