Nathan Gibbs wrote: > Here is what I absolutely do not like about this or agree with. > > The very possibility of there being a kill sig. One specially crafted sig > could kill the virus protection on every server & workstation in our company. > > Allowing the ClamAV Team to remotely nuke a level of our defenses is not > acceptable. ( ClamAV Team, correct me if I've got this wrong. ) > > Obviously, we are betting the farm on solutions provided by these guys. > However, the level of the farm's protection is my responsibility not theirs. > With the public demo of a kill sig capability, I learn that they CAN & WILL > mess with something that is my responsibility. > > Tactically my "kingdom" could be invaded by the ClamAV Team at any time, & > they have already invaded others. > > That is a concept that I will never agree with. > The ClamAV team didn't design the AV to stop on getting a special signature. That signature could exist due to a bug that you decided not to fix (by not updating/patching). It was a clever use of a bug to disable the daemon.
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml