Comments for Dazuko
race conditions with AntiExploit and ClamAV ;-(
I use AntiExploit 1.3beta5 along with ClamAV, for forther virus & exploit detections. but as long as a virus etected, the system hangs up.
Then I PING my computer from another one in the LAN, it replies; by ssh does'nt reply, and ANY user-mode process dosen't reply.
I reboot the computer and start clamd alonely, then everything is O.K. I tried an application written by myself, which is simply registered with dazuko in the READ ONLY mode, it is all right with clamd. Even I change the simple appliction to register in "r+" mode, still everything is O.K. No other than dazuko is registered by clamd and AntiVirus simultaneously and a infected file detected, things went wrong.
Then I believe there must be something wrong within them. can anybody give me some advice?
My Linux kernel version is 2.6.12, dazuko of 2.0.6, clamav of 0.86.1, AntiExploit of 1.3b5.
Thanks.
Best regards.
albcamus
Re: race conditions with AntiExploit and ClamAV ;-(
I recommed installing the new 2.1.0 version of Dazuko. This version has much better support for multiple applications.
It is also a known problem that ClamAV sometimes causes problems (because of a poor usage of the Dazuko API). By not including system paths used by ClamAV (such as /var) you should be able to avoid this problem.
This was briefly discussed in the dazuko-help mailing list:
lists.gnu.org/archive/...