[Avcheck] README.AVP

Len Conrad LConrad@Go2France.com
Sun, 11 Nov 2001 05:10:45 -0600


>You're asked (tried?) several times already. ;)

this is finally the first time actually to do it  :)

>What are the problem you're expirienced or expect to see?

Partly kav questions, and partly avcheck

>This little program should just
>run on FreeBSD, I see no reasons for it to fail.

cockpit errors?  :))

>   The problem(s)
>may arize only from an antivirus daemon itself -- (possible) difficulties
>with setting it up,

setting up server version of kav for freebsd + postfix (+ avcheck) is hard 
when the only doc is what's in the kasp .tgz files.

>See for example notes from Michael Kubecka, or from Piotr Klaban
>(he uses avcheck on Solaris).

where are these notes? I can't find them on avcheck website, nor in the 
avcheck-0.6 file.

-----------------------------

in your README.AVP, you mods to defUnix.prf don't match the defUnix.prf 
delivered in the file:

kav-WorkStationSuit-3.0.136-FreeBSD-4.x.tgz

which is inclued in the file:

kav-ServerSuit-3.0.136-FreeBSD-4.x.tgz

[Location]
List=/tst
...doesn't exist

[Actions]
InfectedAction=0
# This one is important.
.... but it doesn't exist.

[Options]
ShowOk=No
ShowPack=No
Report=No
UseSysLog=No

... these 4 are in the [Report] section, not the [Options] section

-----------------------

"Next, you will need to place avcheck, it's `infected' helper and
uchroot somewhere."

in the avcheck directory, I have

-rwxr-xr-x  1 root  wheel   3581 Oct 26 14:20 infected.ex1
-rwxr-xr-x  1 root  wheel      0 Nov 10 23:35 infected.ex2.cs
-rwxr-xr-x  1 root  wheel      0 Nov 10 23:53 infected.ex2.de
-rwxr-xr-x  1 root  wheel      0 Nov 10 23:53 infected.ex2.en
-rwxr-xr-x  1 root  wheel      0 Nov 10 23:53 infected.ex2.pl
-rwxr-xr-x  1 root  wheel      0 Nov 10 23:53 infected.ex2.ru
-rwxr-xr-x  1 root  wheel      0 Nov 10 23:53 infected.ex2.sk

Which one is your "helper" file?  Are the above 0-byte files correct, or is 
something screwed up?

Finallly, when I try to start up with

#/usr/bin/env - HOME=/ \
 >   /usr/bin/nice \
 >   /var/spool/avp/uchroot -u avdaemon /var/spool/avp \
 >   /kavdaemon -dl -f=/ctl /tst
/usr/libexec/ld-elf.so.1: Shared object "libintl.so.1" not found

but:

# ls -alR /var/spool/avp/usr
total 4
drwxr-xr-x   4 avclient  avgroup  512 Nov 11 03:01 .
drwxr-xr-x  10 root      wheel    512 Nov 11 02:58 ..
drwxr-xr-x   2 avclient  avgroup  512 Nov 11 02:59 libexec
drwxr-xr-x   3 avclient  avgroup  512 Nov 11 03:01 local

usr/libexec:
total 76
drwxr-xr-x  2 avclient  avgroup    512 Nov 11 02:59 .
drwxr-xr-x  4 avclient  avgroup    512 Nov 11 03:01 ..
-r-xr-xr-x  1 avclient  avgroup  75472 Nov 11 02:59 ld-elf.so.1

usr/local:
total 3
drwxr-xr-x  3 avclient  avgroup  512 Nov 11 03:01 .
drwxr-xr-x  4 avclient  avgroup  512 Nov 11 03:01 ..
drwxr-xr-x  2 avclient  avgroup  512 Nov 11 03:01 lib

usr/local/lib:
total 21
drwxr-xr-x  2 avclient  avgroup    512 Nov 11 03:01 .
drwxr-xr-x  3 avclient  avgroup    512 Nov 11 03:01 ..
-rwxr-xr-x  1 avclient  avgroup  18488 Nov 11 03:01 libintl.so.1


thanks,
Len