Michele Cerioni wrote:
If I scan the file thank_you.tif with a non-priv user
(/usr/local/rav8/bin/ravav thank_you.pif) rav found the virus.
I debug qmail-scanner-queue.pl putting the command echo '$?'>/tmp/ris
after the command ravav to check the exit code.
Then I send a mail with the virus, and in /tmp/ris was the value 256.
The exit code must be 2 in case of virus.
Is it a ravav problem or qmail-scanner problem?
QS uses the right shift operator (>>) to eval such exit codes.
The ($? >> 8) used by QS means divide $? by 256 (2^8)
...so, in your case, 256 / 256 = 1
and since ravav FAQ lists:
1 The file is clean.
2 Infected file.
I still suspect your ravav definitions are old
-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
