Open Antivirus Update script

[Matthew Grant <grantma@anathoth.gen.nz>]

Hi There!

Writing a new GPLed auto update shell script for down loading the latest and greatest OAV virus signatures from http://www.openantivirus.org/latest.php.  Features are:

• Uses wget to get latest, only downloading and going further if it is new
• Downloads and extracts into a subdirectory, named by date/time
• Verifies .credo signatures via openssl
• Extracts virussignatures.strings to support ClamAV and to be written Perl module
• After all checks are complete, symlinks files into parent directory
• Reloads ScannerDaemon after all checks complete
• repacks .credo file to support ScannerDaemon running under kaffe.
• runs as a specified user and group user
• has config file in /etc/ specifying all options you may want
• can append extra signatures to unpacked virussignatures.strings file, as well as adding to kaffe compatible .credo file.
• email to a list of addresses if the update fails, in which case the previous successful download will continue to be used.

Obviously, ScannerDaemon should be run with the -nosignatures option and use the kaffe compatible .credo file.  No security is loas as the script checks the validity of the downloaded stuff from openantivirus.org

This is intended to form the standard basis of the OAV virus database support needed by CLamAV and ScannerDaemon in Debian.  It will be packaged as oav-virussignatures, and an initial virus database will be included.

With Virus Scanning stuff and peoples E-mail going to be depending on this, all bugs will have to be elevated to security status, even changes to the base URL for the Updates.

Kurt,  could you please confirm that you are not going to change the basic format of the OAV .credo  updates on us, as if it changes too many people's security will be affected.  Keeping us well informed about URL changes would also be a good idea.

Thank you all so very much for making this possible.

Best Regards,

Matthew Grant

-- 
===============================================================================
Matthew Grant	     /\	 ^/\^	grantma@anathoth.gen.nz      /~~~~\
A Linux Network Guy /~~\^/~~\_/~~~~~\_______/~~~~~~~~~~\____/******\
===============================================================================

Attachment: signature.asc
Description: This is a digitally signed message part