Clamav-wrapper

Jan-Peter Koopmann Jan-Peter.Koopmann at SECEIDOS.DE
Thu Aug 14 10:21:24 IST 2003


> What should I add to the list?

Let me quote the manpages:

       EXTRACTION OPTIONS:

       --disable-archive
              Disable archive support built in libclamav.

       --max-files=#n
              Extract  first #n files from each archive. This option
should be
              used to protect your system against DoS  attacks.  Note:
always
              few  files  more  are  extracted due to the limit
implementation
              (expecially when archive contains small files). All  file
types
              are counted.

       --max-space=#n
              Extract  first  #n kilobytes from each archive. You may
give the
              number in megabytes in format xM or xm, where x is a
number.

       --max-recursion=#n
              Set the archive recursion level.

       --unzip[=FULLPATH]
              With this option all zipped files are scanned. If  you
turn  on
              this option without the argument, unzip program will be
searched
              in $PATH. If unzip is  outside  $PATH,  please  supply  it
with
              =pathname. Remember about '=' between option and argument.
(This
              is  needed  due  to  the  implementation  of
getopt_long()  and
              optional arguments to long options).

       --unrar[=FULLPATH]
              Supports .rar files.

       --unace[=FULLPATH]
              Supports .ace files.

       --unarj[=FULLPATH]
              Supports .arj files.

       --unzoo[=FULLPATH]
              Supports .zoo files.

       --lha[=FULLPATH]
              Supports .lzh files.

       --jar[=FULLPATH]
              clamscan  uses  unzip  for .jar files, so optionally give
a full
              path to unzip.

       --deb[=FULLPATH]
              This option supports debian binary packages. Implies
--tgz,  but
              doesn't conflict with --tgz=FULLPATH. It requires ar
utility.

       --tar[=FULLPATH]
              This option supports non-compressed archives.

       --tgz[=FULLPATH]
              This option supports tar.gz and .tgz files. You need GNU
tar, on
              non-Linux system you probably have it as gtar. If it's in
$PATH,
              please  use --tgz=gtar in other case please use a full
pathname.



Therefore I would go for

        -r --disable-summary --stdout
       --unzip
       --unrar
       --unace
       --unarj
       --unzoo
       --lha
       --jar
       --deb
       --tar
       --tgz

But on the other hand I have not tested it yet and my clamav-freebsd
port automatically installs all necessary programs (arj, rar etc.).

Regards,
  JP




More information about the MailScanner mailing list