Borst Posted May 20, 2003 Share Posted May 20, 2003 Starting to get the hang of some of this...My question. I installed F-Prot AV this evening. I wrote a short script that will run the download script that came with F-Prot. My script is as follows (comments removed):/usr/local/f-prot/check-updates.sh -quietThis script works fine when run in root but does not work when run as a user. After playing around with permissions, I still couldn't get it to run. The problem is that as a user, I don't have permission to access /var/tmp/f-prot. I guess this where the new defs are held to until they are installed in the correct directory. Is it bad to give me as a user access to this director? I assume I would need both read and write? The other option is DL'ing defs while logged in as root. I would rather not connect to the net logged in as root if I can help it. Seems like I asking for trouble. Any excellant advice is greatly appreciated. Borst Quote Link to comment Share on other sites More sharing options...
Bruno Posted May 20, 2003 Share Posted May 20, 2003 Hi BorstIf the problem is the permissions of running the script and accessing /var/tmp/f-prot, you can add the line ¨/usr/local/f-prot/check-updates.sh -quiet¨ at the bottom of your ¨/etc/rc.d/rc.local¨ startup script, it will run as root as your system boots.See; if any user could manipulate/install/remove the av-defs, the av-software would just not be any good ! ;)Hope this helpsB) Bruno Quote Link to comment Share on other sites More sharing options...
Borst Posted May 20, 2003 Author Share Posted May 20, 2003 Unfortunately, I have dial up. My net connection is not live at start up so the defs would not be updated. I guess the solution is to update the defs while logged as root?Borst Quote Link to comment Share on other sites More sharing options...
Bruno Posted May 20, 2003 Share Posted May 20, 2003 Sorry did not even come up in my head that you would have dial-up ! We broadband people are spoiled and tend to forget how things were before we got it.Updating manualy seems to be your only option. Bruno Quote Link to comment Share on other sites More sharing options...
Borst Posted May 20, 2003 Author Share Posted May 20, 2003 Sorry did not even come up in my head that you would have dial-up ! We broadband people are spoiled and tend to forget how things were before we got it.Updating manualy seems to be your only option. BrunoThanks Bruno. I now realize I will have to run the F-Prot scan in root also. F-Prot cannot clean up a virus unless the user has rw permission for infected file. Therefore, I will have to update and run the scan in root.Still getting use to the permissions thing. It makes lots of sense and makes the PC much more secure. It just requires a new way of thinking. Borst Quote Link to comment Share on other sites More sharing options...
Bruno Posted May 20, 2003 Share Posted May 20, 2003 Still getting use to the permissions thing. It makes lots of sense and makes the PC much more secure. It just requires a new way of thinking.It are exactly those permissions that makes Linux less vunerable for viruses. If you do not run any mail-server, your best protection is setting your mail client to text and NOT html ! Bruno Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.