antivirus

[Peter Mann]

On Mon, Oct 14, 2002 at 05:10:58PM +0200, Ing. Pavel PaJaSoft Janousek wrote:
> Martin Lebeda wrote:
> > Dokazal by tu nekdo srovnat mezi F-Prot a Kaspersky?
> 
> 	Aktualni verzi (nejnovejsi build) AVPcka jsem instaloval v patek presne 
> dle dokumentace, vysledek byl, ze byl nutny hovor na technickou podporu, 
> protoze bez ni to proste nejelo... a nedozvite se vubec nic (local 
> mailer error 1 je velmi vymluvny...:->).
> 
> 	Jsem z Linuxu zvykly na mnoho veci, ale to, co predvadi Kaspersky Lab 
> (mohu srovnavat nekolik verzi AVPcka) v Linuxu je ubohost,  a jeste si 
> za to dovoli rikat nemale penize...:-(

pouzivam KAV, ale novsiu verziu som zatial neskusal, hoci vcera prisla
na CDcku nejaka 4.0.2 ... od zaciatku vsak nepouzivam cisty KAV, ale
spolu s "avcheck" - http://www.corpit.ru/avcheck/ - bezi to pod
neprivilegovanym uzivatelom v chroot prostredi atd. atd.

README.AVP:
By default, AVP installed to run as root -- this is a *very bad idea*.
Who can tell us that it is safe to run a piece of unknown software,
written by people who has little unix expirience (not to say about unix
security!), as root?!  I personally recommend to run it as dedicated
user (as described in avcheck manpage), *and* putting it into the chroot 
jail -- just to be shure that it will not affect other parts of system in 
any case.
Setting it up in this way is tricky, but for me, it is better to spend
some (probably hard) time setting it up instead of determining why your
system is open to everyone and cracked...

Fortunately for us, kavdaemon program, at least for Linux, linked statically,
so it is relatively easy to put it into chroot jail.  On other OSes, some
additional steps will be required to properly set up a chroot jail for it.

.
.
.

-- 

5o   Peter.Mann at tuke.sk
     KLFMANiK ICQ 12491471
         PM2185-RIPE