From: Adrian Bunk <bunk@stusta.de>
To: akuster808 <akuster808@gmail.com>
Cc: yocto@yoctoproject.org
Subject: Re: [meta-security][PATCH] clamav: freshclam need bind to run
Date: Sun, 7 Apr 2019 08:12:32 +0300 [thread overview]
Message-ID: <20190407051232.GA30195@localhost> (raw)
In-Reply-To: <b0151407-4541-79ae-c05b-04198e4c7c57@gmail.com>
On Sun, Apr 07, 2019 at 01:38:38AM +0530, akuster808 wrote:
>
>
> On 4/6/19 8:31 PM, Adrian Bunk wrote:
> > On Sat, Apr 06, 2019 at 08:15:40PM +0530, Armin Kuster wrote:
> >> Add it to the rdepends for that package
> >>
> >> Signed-off-by: Armin Kuster <akuster808@gmail.com>
> >> ---
> >> recipes-security/clamav/clamav_0.99.4.bb | 2 ++
> >> 1 file changed, 2 insertions(+)
> >>
> >> diff --git a/recipes-security/clamav/clamav_0.99.4.bb b/recipes-security/clamav/clamav_0.99.4.bb
> >> index 6219d9e..dbe903f 100644
> >> --- a/recipes-security/clamav/clamav_0.99.4.bb
> >> +++ b/recipes-security/clamav/clamav_0.99.4.bb
> >> @@ -152,3 +152,5 @@ RCONFLICTS_${PN} += "${PN}-systemd"
> >> SYSTEMD_SERVICE_${PN} = "${BPN}.service"
> >>
> >> RDEPENDS_${PN} += "openssl ncurses-libncurses libbz2 ncurses-libtinfo clamav-freshclam clamav-libclamav"
> >> +
> >> +RDEPENDS_freshclam = "bind"
> > freshclam depending on a DNS server looks very wrong.
> got talk to clamav folks then.
>
> >
> > What is the actual problem?
>
> ClamAV update process started at Sat Apr 6 14:59:25 2019
> WARNING: Can't query current.cvd.clamav.net
> WARNING: Invalid DNS reply. Falling back to HTTP mode.
> ERROR: Can't get information about database.clamav.net: Temporary failure in name resolution
> ERROR: Can't download main.cvd from database.clamav.net
> Giving up on database.clamav.net...
>
> because
>
> Use DNS to verify virus database version. Freshclam uses DNS TXT records
> to verify database and software versions
>
> therefor I am including bind.
freshclam needing DNS information makes sense, which means it must be
configured how to access a DNS server.
On the local machine you need only DNS client funtionality,
just like every user needs for a web browser.
Forcing installation of a DNS server is not the correct solution
when the actual problem is just a configuration issue on the
machine where you were trying it.
> - Armin
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
next prev parent reply other threads:[~2019-04-07 5:12 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-04-06 14:45 [meta-security][PATCH] clamav: freshclam need bind to run Armin Kuster
2019-04-06 15:01 ` Adrian Bunk
2019-04-06 20:08 ` akuster808
2019-04-07 5:12 ` Adrian Bunk [this message]
2019-04-07 6:15 ` akuster808
2019-04-07 7:16 ` Adrian Bunk
2019-04-08 5:23 ` akuster808
2019-04-06 15:07 ` akuster808
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190407051232.GA30195@localhost \
--to=bunk@stusta.de \
--cc=akuster808@gmail.com \
--cc=yocto@yoctoproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.