On Thu, Jun 06, 2002 at 10:01:39AM -0400, CertaintyTech - Ed Henderson wrote:
> this scenario hold true if you used Sophie daemon (which I do) instead of
> sweep (the commandline executable)?  Doesn't sophie load all of the vdefs
> into memory and won't re-read the vdefs unless it is HUP'ed?  If this is

I wouldn't rely on it. I have definitely seen sophie complaining when I
updated the library - not sure about just adding pattern files. Restarting
sophie fixed that of course. However, even if you have just added pattern
files, you want Sophie to use them - so a restart of sophie is still in
order. 

When I update my pattern files, I make a tmp dir, copy the current pattern
files into it, unpack the newly downloaded patterns into it, then run sweep
(replace with whatever) using the files in the temp dir rather than the
default dir over EICAR.COM, and if it all works, MOVE (i.e. not copy - same
disk) the files live. Then restart any daemonized versions of the scanners.
That means you have minimized your window (via the MOVE), so at worse you
only cause a temp failure on a couple of messages.

Good Practice mandates you should "expect the unexpected". Write your system
to handle the worse-case, and sleep easier at night. :-)

-- 
Cheers

Jason Haar

Information Security Manager
Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to