extremeshok/clamav-unofficial-sigs

Question: Is rsync really mandatory?

sbcgm opened this issue · 2 comments

sbcgm commented

Hi everyone!

I would assume that you could download the signatures with http(s) instead of rsync, yet I haven't found anything that would suggest you could configure clamav-unofficial-sigs in a way so it would download via https only.

Are those signature dbs really available via rsync only?

Thanks

perplexityjeff commented

I think for the actual downloading it seems that curl is used and not rsync? rsync seems to be used to sync permissions as far as I can read the script maybe I am wrong here. Take a look into the xshok_file_download() function.

extremeshok commented

YES...
rsync used for sanesecurity signatures, yes there are ways around this, but its not what they want.
rsync is also used as a more efficient method than copy, to sync the reqwuired downloaded databases with clamav.