Hi Gavin (and list),
I'm nearly finished a GUI for Clamav, the only thing I really have left to do is stress testing and documentation.
I've made a few changes to the source code which I plan to release in due course, in order to make it work with resource forks....however, like you, I don't have access to any test viruses. The closest I got was about 4 years ago when I actually got a virus, but "Disinfectant" took care of that for me. Bit annoying now though, I could do with having it back!!!
I hope to have my program available to others by the end of this week. I'll keep you posted if you like?
Also, it's not completely useless for Mac users just cos it didn't scan resource forks. I still get emails from windoze-using friends containing viruses (the emails, not the friends!) so it's worthwhile checking my attachments folder if not for my own peace of mind, then at least I can tell my friends they need to update their virus checker.
Anyway, I'm wasting coding/testing time here!!
Mark
On 4 Aug 2004, at 1:00 pm, Gavin Aiken wrote:
Apologies if this is the wrong place to ask this but it seemed more of a
development question than a user one.
I have been testing clamav on OSX and noticed that it does not scan Mac resource forks, only data forks - which is to be expected as it is a unix-level port, and most of the ways to get at resource forks are presumably in different file access API's (carbon/cocoa?).
Several questions arise from that:
1. Does anyone have any plans to add this ability? I think I am right in
saying that it could be as simple as scanning "file/rsrc" as well as "file"
on OSX systems. This could be included by an #ifdef at compile time maybe?
2. I don't think any of the classic old Mac resource viruses (MDBF, MDEF
etc) are in the clamav virus db. Does anyone have access to these for
testing purposes, and to get signatures for them? If not, how could one go
about making sure this worked?
3. I saw on the user list that someone had created an AppleScript studio gui
front-end for OSX to run clamav. I was looking for one because I was
considering writing one myself in fact! I would think that without resource
fork scanning that clamav would be reasonably useless on Mac. Anyone have
any further thoughts or opinions on that? Should there be something in the
documentation explaining to OSX users that it probably isn't a good
replacement for Virex etc, at least not yet!?
regards, Gavin
------------------------------------ Mark Allan IT Support George Watson's College
W: www.gwc.org.uk E: [EMAIL PROTECTED] P: +44 (0)131 446 6070
------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com _______________________________________________ Clamav-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-devel
