ClamAv: is anyone paying attention?

[Andy]

On 18/11/06, Mario Vukelic <mario.vukelic at dantian.org> wrote:
> Just to make one thing clear: ClamAv is there to enable a linux mail
> server to protect Windows users from Windows viruses.
Is there one that is for ordinary (non mail server admins) users?


> AFAIK all GNU/Linux viruses were proof-of-concept

Symantec would disagree with you on that one:
<http://www.symantec.com/security_response/writeup.jsp?docid=2001-032311-2042-99&tabid=1>
I have seen others as well

> and none is in the
> wild.

Probably not at the current time, but then viruses should die pretty
soon after they are born, once you know what they look like and you
can remove them, at fix the problems that allowed them to infiltrate
the system


> Yes, theoretically GNU/Linux is vulnerable and diligence should be
> used. But GNU/Linux viruses are not the reason for ClamAvs existence or
> use.

Maybe we need an AV scanner, lets not get careless, again with more
distros targeted at getting new users then then its only a matter of
time before virus writers start attacking Linux, though it is more
secure are you willing to bet on it being unbreakable?


> Anyway, the more important thing with a virus scanner is that the virus
> database is up to date, and this seems to be done via internet anyway:

So the fact the engine is outdated doesn't cause a problem? oddly the
clamAV FAQ suggests that you shouldn't use outdated engines


-- 
DRM: Digital Restrictions Management -- learn about the dangers at
http://www.defectivebydesign.org/what_is_drm