next up previous
Next: Scan engine Up: Technicals Previous: Technicals

Security

Clam AntiVirus cares about security. Dangerous operations (such as extracting, temporary file creation, unlink() operations) are executed with clamav privileges. But there are no programs without bugs. This is a young project and everything is possible. In some places it uses the snprintf() function, some older systems (C libraries) however the buffer length in this function isn't checked. This example shows, that you should check your system first. Never set SUID/SGID bits on Clam AntiVirus executables. If the SUID bit is set and clamscan is owned by root, every file on the system may be modified with the -log option. Normal users may use clamscan to scan their files, other files shouldn't interest them.



Tomasz Kojm 2002-10-09