# $Id: smeserver-clamav.spec,v 1.20 2022/11/22 20:23:59 jpp Exp $ Summary: SME Server module to configure clamav %define name smeserver-clamav Name: %{name} %define version 11.0.0 %define release 4 Version: %{version} Release: %{release}%{?dist} License: GPL Group: System Environment/Base Source: %{name}-%{version}.tar.xz BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot BuildArchitectures: noarch Requires: smeserver-lib Requires: smeserver-base >= 5.8.0-63 Requires: clamav >= 0.103 Requires: clamd >= 0.103 Requires: clamav-data Requires: clamav-update Requires: smeserver-formmagick >= 1.4.0-12 Requires: smeserver-spamassassin >= 2.7.0 Provides: e-smith-clamav Obsoletes: e-smith-clamav Obsoletes: e-smith-antivirus Obsoletes: clamav-es Obsoletes: clamav-es-libs BuildRequires: smeserver-devtools %description SME Server enhancement to configure and run clamd and freshclam %changelog * Sat Apr 13 2024 Jean-Philippe Pialasse 11.0.0-4.sme - move post-transaction-actions script [SME: 12533] * Thu Apr 04 2024 Brian Read 11.0.0-3.sme - Set license file to GPL2.0 [SME: 12577] * Sat Mar 23 2024 Brian Read 11.0.0-2.sme - Change Requires: e-smith- to Requires:smeserver- * Sat Mar 23 2024 Brian Read 11.0.0-1.sme - Update Release and Version to base version and 1st release for SME11 [SME: 12518] * Mon Jul 10 2023 cvs2git.sh aka Brian Read 2.7.0-17.sme - Roll up patches and move to git repo [SME: 12338] * Mon Jul 10 2023 BogusDateBot - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, by assuming the date is correct and changing the weekday. * Tue Nov 22 2022 Jean-Philippe Pialasse 2.7.0-16.sme - review post-actions [SME: 12184] * Wed May 04 2022 Zsolt Vasarhelyi 2.7.0-15.sme - logrotate clamd keeps logging to old log [SME: 11963] * Mon Mar 14 2022 Jean-Philippe Pialasse 2.7.0-14.sme - remove default property ArchiveBlockEncrypted [SME: 11695] * Sat Jan 01 2022 Terry Fage 2.7.0-13.sme - fix property name error 2.7.0-12.sme [SME: 11695] * Mon Dec 20 2021 Jean-Philippe Pialasse 2.7.0-12.sme - fix spec file error 2.7.0-11.sme [SME: 11474] * Mon Dec 20 2021 Jean-Philippe Pialasse 2.7.0-11.sme - rename property ArchiveBlockEncrypted to AlertEncrypted as per upstream [SME: 11695] added properties AlertBrokenExecutables AlertExceedsMax AlertOLE2Macros AlertPartitionIntersection AlertPhishingCloak and AlertPhishingSSLMismatch with default no added property HeuristicAlerts with default yes - fix noise on centos2sme [SME: 11474] * Mon Nov 15 2021 Jean-Philippe Pialasse 2.7.0-10.sme - identify from which server is freshclam error [SME: 11755] fix from Graeme Fleming * Wed Jun 09 2021 Jean-Philippe Pialasse 2.7.0-9.sme - fix typo in logrotate [SME: 11608] * Sun Apr 18 2021 Jean-Philippe Pialasse 2.7.0-8.sme - fix typo and missing +x [SME: 11520] * Wed Apr 07 2021 Jean-Philippe Pialasse 2.7.0-6.sme - fix issues with non epel standard scan.conf [SME: 11520] move clamd.conf to scan.conf remove alias for clamtop add a wrapper for clamdscan to force --fdpass * Fri Jan 08 2021 Jean-Philipe Pialasse 2.7.0-5.sme - ease use of clamdtop [SME: 11313] * Wed Jan 06 2021 Jean-Philipe Pialasse 2.7.0-4.sme - fix Transaction check error [SME: 11311] * Sat Jan 02 2021 Jean-Philipe Pialasse 2.7.0-2.sme - add pid folder /run/clamd/ [SME: 11103] few improvements - create update event [SME: 11162] * Wed Dec 16 2020 John Crisp 2.7.0-1 - Updated to use 0.103+ from EPEL [SME: 11194] - Updated to use systemd for clamd [SME: 11103] - Updated to use systemd for freshclam [SME: 11104] * Tue Nov 26 2019 Jean-Philipe Pialasse 2.6.0-4.sme - increase lower memory limit to 1GB [SME: 10833] * Thu Oct 24 2019 Jean-Philipe Pialasse 2.6.0-3.sme - fix for AllowSupplementaryGroups warning [SME: 10813] thanks to bunkobugsy * Thu May 12 2016 Daniel Berteaud 2.6.0-2.sme - Rebuild for [SME: 9393] * Sat Feb 06 2016 stephane de Labrusse 2.6.0-1.sme - Initial release to sme10 * Tue Dec 1 2015 Daniel Berteaud 2.4.0-5.sme - Disable unofficial sigs for filesystem scans [SME: 9142] * Tue Sep 8 2015 Daniel Berteaud 2.4.0-4.sme - Double the memory limit as we do not have enough room [SME: 8933] * Thu Jul 3 2014 Ian Wells 2.4.0-3.sme - Increase MemLimit to 700M for clamav-0.98 [SME: 8483] * Mon Jul 8 2013 Chris Burnat 2.4.0-2.sme - Move clamscan scheduling to complete before 99-raid-check [SME: 7758] * Thu Jan 31 2013 Shad L. Lords 2.4.0-1.sme - Roll new stream for sme9 * Mon Jun 14 2010 Ian Wells 2.2.0-12.sme - Re-work patch to improve and document template [SME: 6011] * Sat Jun 5 2010 Ian Wells 2.2.0-11.sme - template /etc/cron.daily/freshclam, and make it a NO-OP [SME: 6011] * Sun Apr 18 2010 Jonathan Martens 2.2.0-10.sme - Increase MemLimit to 600M for clamav-0.96 [SME: 5868] * Fri Apr 02 2010 Filippo Carletti 2.2.0-9.sme - Increase MemLimit to 300M for clamav-0.96 [SME: 5868] * Sat Feb 6 2010 Stephen Noble 2.2.0-8.sme - Setup logrotate for /var/log/clamd/clamscan.log [SME: 5570] * Fri Nov 6 2009 Jonathan Martens 2.2.0-7.sme - Remove create option from logrotate configuration [SME: 5570] - Fix version number in previous changelog entry * Fri Nov 6 2009 Jonathan Martens 2.2.0-6.sme - Setup logrotate for /var/log/clamd/smeserver-clamscan.log [SME: 5570] - Minor changelog fixes in version number * Wed Nov 4 2009 Jonathan Martens 2.2.0-5.sme - Change default value for HeuristicScanPrecedence to yes [SME: 5204] * Tue Jun 2 2009 Shad L. Lords 2.2.0-4.sme - Fix permissions on freshclam.conf file [SME: 5319] * Mon Apr 13 2009 Jonathan Martens 2.2.0-3.sme - Add HeuristicScanPrecedence option, default disabled [SME: 4598] * Thu Nov 27 2008 Stephen Noble 2.2.0-2.sme - Obsolete e-smith-antivirus [SME: 4786] * Tue Oct 7 2008 Shad L. Lords 2.2.0-1.sme - Roll new stream to separate sme7/sme8 trees [SME: 4633] * Mon Sep 22 2008 Stephen Noble 1.2.0-26 - Remove obsolete locale tags [SME: 4235] * Sun Aug 10 2008 Shad L. Lords 1.2.0-25 - Remove links to crontab in all but clamav-update [SME: 4494] * Wed Apr 30 2008 Jonathan Martens 1.2.0-24 - Remove any /etc/cron.d/clamav file. We moved the content to /etc/crontab [SME: 1047], but we need to remove any leftover file from earlier template expansion, which, if present, could cause the nightly file scanning to be run twice. [SME: 4266] * Sun Apr 27 2008 Jonathan Martens 1.2.0-23 - Add common tags to e-smith-formmagick's general [SME: 4288] * Fri Apr 25 2008 Charlie Brady 1.2.0-22 - Add Obsoletes headers to force removal of clamav-es and clamav-es-libs. [SME 4167] * Fri Apr 18 2008 Shad L. Lords 1.2.0-21 - Update defaults for clamav 0.93 [SME: 4223] * Fri Apr 18 2008 Jonathan Martens 1.2.0-20 - Move cron template from cron.d to crontab [SME: 1047] * Tue Mar 18 2008 Shad L. Lords 1.2.0-19 - Fix clamav version string [SME: 4060] * Wed Feb 13 2008 Stephen Noble 1.2.0-18 - Remove tags now in general [SME: 3915] * Sun Feb 10 2008 Stephen Noble 1.2.0-17 - Remove duplicate entries [SME: 3890] * Mon Jan 07 2008 Stephen Noble 1.2.0-16 - Cosmetic removal of word entire on panel [SME: 3483] * Thu Sep 06 2007 Filippo Carletti 1.2.0-15 - Fix freshclam.conf permissions [SME: 3375] * Fri Jun 08 2007 Charlie Brady 1.2.0-14 - Use full paths in update-failed script - tai64nlocal was not being found in $PATH. [SME: 1686] * Sun Apr 29 2007 Shad L. Lords - Clean up spec so package can be built by koji/plague * Wed Apr 18 2007 Shad L. Lords 1.2.0-13 - Up memory limit for clamd again [SME: 2743] * Wed Feb 21 2007 Shad L. Lords 1.2.0-12 - Up memory limit for clamd [SME: 2528] * Wed Feb 14 2007 Shad L. Lords 1.2.0-11 - Update for clamav v0.90 [SME: 2508] * Tue Feb 13 2007 Shad L. Lords 1.2.0-10 - Improve algorithm for displaying errors [SME: 1686] * Mon Feb 12 2007 Shad L. Lords 1.2.0-9 - Improve sed expression for freshclam failures [SME: 1686] * Mon Feb 12 2007 Shad L. Lords 1.2.0-8 - Allow clamav to read freshclam update log [SME: 1686] * Fri Jan 26 2007 Shad L. Lords 1.2.0-7 - Provide more feedback on freshclam events [SME: 1686] * Wed Dec 13 2006 Federico Simoncelli 1.2.0-6 - Added support for options: max-ratio, no-html, no-mail. [SME: 2024] - Redirected the stderr output to /var/log/clamd/smeserver-clamscan.log. [SME: 2004] * Thu Dec 07 2006 Shad L. Lords - Update to new release naming. No functional changes. - Make Packager generic * Wed Nov 29 2006 Gordon Rowell 1.2.0-04 - Restrict filesystem scan to /home/e-smith/files by default [SME: 2082] * Sun Aug 27 2006 Charlie Brady 1.2.0-03 - Fix --exclude arg syntax. [SME: 1889] * Fri Jun 16 2006 Gordon Rowell 1.2.0-02 - Fix typo in ArchiveBlockEntrypted [SME: 1584] * Wed Mar 15 2006 Charlie Brady 1.2.0-01 - Roll stable stream version. [SME: 1016] * Tue Mar 14 2006 Gordon Rowell 1.1.2-10 - Restart crond in clamav-update so cron notices cron.d/clamav [SME: 966] * Wed Feb 8 2006 Gavin Weight 1.1.2-09 - Added migrate fragment for clamav DatabaseMirror. [SME: 83] * Fri Jan 27 2006 Gordon Rowell 1.1.2-08 - Bump release number to ensure patch is in CVS * Wed Jan 18 2006 Gordon Rowell 1.1.2-07 - Expand MEMLIMIT in bootstrap-console-save (and don't attempt to restart the service there) * Wed Jan 18 2006 Gordon Rowell 1.1.2-06 - Change back to softlimit -a [SME: 426] * Wed Jan 18 2006 Gordon Rowell 1.1.2-05 - Set db default for clamd{MemLimit}==80M and use it in the run script - Expand templates in events rather than run file [SME: 426] * Mon Oct 17 2005 Gordon Rowell 1.1.2-04 - Fix typos in smeserver-clamscan [SF: 1304217] * Fri Oct 14 2005 Gordon Rowell 1.1.2-03 - Move all L10Ns to smeserver-locale [SF: 1309520] * Mon Sep 26 2005 Gordon Rowell 1.1.2-02 - Added Italian L10N - Thanks Filippo Carletti [SF: 1309266] * Mon Sep 26 2005 Gordon Rowell 1.1.2-01 - Roll patches to 1.1.1-06 - Add German L10N * Mon Sep 26 2005 Gordon Rowell 1.1.1-06 - Exclude /var and all of /usr/share (not just /usr/share/doc) from filesystem scan [SF: 1304217] * Fri Sep 23 2005 Gordon Rowell 1.1.1-05 - French L10N fixes [SF: 1242586] * Sat Aug 20 2005 Gordon Rowell 1.1.1-04 - French L10N - Merci Didier Rambeau [SF: 1242586] * Sat Aug 20 2005 Gordon Rowell 1.1.1-03 - Don't scan quarantine area, even if quarantining is disabled [SF: 1245655] * Fri Aug 19 2005 Charlie Brady 1.1.1-02 - Add Provides: header, to satisfy any package which requires defunct e-smith-clamav. * Thu Aug 18 2005 Gordon Rowell - [1.1.1-01] - Package renamed to smeserver-clamav [SF: 1263460] * Thu Aug 18 2005 Gordon Rowell - [1.1.0-08sme02] - Rename /sbin/e-smith/clamscan to smeserver-clamscan [SF: 1263460] * Thu Aug 18 2005 Gordon Rowell - [1.1.0-08sme01] - Disable quarantining by default, add panel toggle [SF: 1245655] * Tue Aug 9 2005 Gordon Rowell - [1.1.0-08] - Add --move=$clamav{QuarantineDirectory} to clamscan, exclude directory from being scanned, add database default and set permissions in spec file [SF: 1245655] * Thu Aug 4 2005 Charlie Brady - [1.1.0-07] - Remove freshclam runs from clamav crontab template - we now run supervised freshclam instance. [SF: 1251944] * Thu Aug 4 2005 Shad Lords - [1.1.0-06] - Include db entry to exclude /proc, /sys and /usr/share/doc from scans [SF: 1243741, 1243831] * Wed Jul 27 2005 Gordon Rowell - [1.1.0-05] - Exclude /proc, /sys and /usr/share/doc from scans [SF: 1243741, 1243831] - Run freshclam with --quiet instead of --verbose [SF: 1245602] * Fri Jul 22 2005 Charlie Brady - [1.1.0-04] - Fix typo in en-us lexicon. [SF: 1242585] * Mon May 30 2005 Charlie Brady - [1.1.0-03] - Fix last-updated section and labels [Gordon: SF-1200428] * Tue May 17 2005 Charlie Brady - [1.1.0-02] - Add clamav-update event directory. - Modify some of the panel code to avoid logging of multiple db property transactions. * Fri May 13 2005 Gordon Rowell - [1.1.0-01gr06] - Read the timestamp of the clamav database files in the panel to show the last updated time [SF:1200428] - Change /sbin/e-smith/freshclam-update-ok to /bin/sh, with no content. - TODO: make the update mails configurable * Fri May 6 2005 Gordon Rowell - [1.1.0-01gr05] - And hide the sections * Fri May 6 2005 Gordon Rowell - [1.1.0-01gr04] - Fix up section bars * Fri May 6 2005 Gordon Rowell - [1.1.0-01gr03] - Removed the qmailscan_integration part of the panel - Removed the database mirror select box. Anyone who isn't satisfied with using db.local.clamav.net can set the hostname in the database directly. - Hid the updates and proxy sections, based on $clamav{ShowProxySection} and $clamav{ShowUpdatesSection} - Panel looks rather bare now - Read the last updated date from $clamav{SignaturesUpdated} - Modified /sbin/e-smith/freshclam-update-ok to set the above value - Morphed /etc/clamscan template into /sbin/e-smith/clamscan, which can read the db directly. * Fri May 6 2005 Gordon Rowell - [1.1.0-01gr02] - Use db.local.clamav.net by default (rather than db.us). * Fri May 6 2005 Gordon Rowell - [1.1.0-01gr01] - Bump version to 1.1.0-01gr01 to upgrade over Shad's 1.0.0 - Roll new tarball after major merge of Shad's work. * Fri May 6 2005 Gordon Rowell - [0.0.1-06gr02] - Cleaned up patch and startup symlinks * Fri May 6 2005 Gordon Rowell - [0.0.1-06gr01] - Merge in Shad Lords' e-smith-spamassassin work (based in part on work from Damien Curtain) and panel - Moved freshclam run script options to database defaults - Created /sbin/e-smith/freshclam-update-{failed,ok} * Tue Apr 19 2005 Charlie Brady - [0.0.1-06] - Add missing log directories. * Tue Apr 19 2005 Charlie Brady - [0.0.1-05] - Don't start freshclam or clamd until after bootstrap-console. - Move all symlink creation into createlinks script. * Mon Mar 21 2005 Charlie Brady - [0.0.1-04] - Fix data directory in freshclam configuration. * Fri Feb 18 2005 Charlie Brady 0.0.1-03 - Config fixes for clamav-0.83 * Wed Feb 09 2005 Charlie Brady - [0.0.1-02] - Add Requires headers for clamd and clamav-db. * Wed Feb 09 2005 Charlie Brady - [0.0.1-01] - Initial %prep %setup mkdir -p root/run/clamd rm -rf root/etc/e-smith/templates/usr/lib/systemd/system/freshclam.service.d rm -rf root/usr/lib/systemd/system/freshclam.service.d %build perl createlinks %pre if [ $1 -gt 1 ] ; then if [ -e /var/service/clamd/run ] ; then /usr/bin/sv d clamd /usr/bin/sv d clamd/log fi fi if [ $1 -gt 1 ] ; then if [ -e /var/service/freshclam/run ] ; then /usr/bin/sv d freshclam /usr/bin/sv d freshclam/log fi fi %post # removing old conf file if [[ -f /etc/clamd.d/clamd.conf ]]; then rm -f /etc/clamd.d/clamd.conf fi #echo "Changing freshclam log owners" if [[ -d /var/log/freshclam ]]; then chown -R clamupdate:clamupdate /var/log/freshclam; fi #echo "Changing clamd log owners" if [[ -d /var/log/clamd ]]; then chown -R clamscan:clamscan /var/log/clamd; fi %install rm -rf $RPM_BUILD_ROOT (cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) /sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ --dir /run/clamd 'attr(2775,clamscan,virusgroup)' \ --dir /var/log/freshclam 'attr(2755,clamupdate,clamupdate)' \ --dir /var/log/clamd 'attr(2755,clamscan,clamscan)' \ --dir /var/spool/clamav/quarantine 'attr(2750,clamscan,clamscan)' \ --file /sbin/clamdscan 'attr(0755,root,root)' \ --file /sbin/e-smith/freshclam-update-failed 'attr(0755,root,root)' \ --file /sbin/e-smith/freshclam-update-ok 'attr(0755,root,root)' \ --file /sbin/e-smith/smeserver-clamscan 'attr(0755,root,root)' \ --file /usr/lib/systemd/system/clamd.service 'attr(0644,root,root)' \ --file /usr/lib/systemd/system/freshclam.service 'attr(0644,root,root)' \ --dir /usr/lib/systemd/system/clamd.service.d 'attr(0755,root,root)' \ --dir /usr/lib/systemd/system/freshclam.service.d 'attr(0755,root,root)' \ > %{name}-%{version}-%{release}-filelist %clean rm -rf $RPM_BUILD_ROOT %files -f %{name}-%{version}-%{release}-filelist %defattr(-,root,root)