Clamav official signatures uploaded even if disabled on old installations

[lucagasparini]

On old installations the presence of the clamav-data package does not make the disabling of the official clamd signatures definitive.
Even if the official signatures are disabled, the first time they are updated, they are reloaded again.

Steps to reproduce

• Verify that the clamav-data package is installed: rpm -q clamav-data
• disable official signatures:

config setprop clamd OfficialSignatures disabled
signal-event nethserver-antivirus-update

Verify that these files are no longer present:

/var/lib/clamav/main.cvd
/var/lib/clamav/daily.cvd
/var/lib/clamav/bytecode.cvd

• yum update clamav-data if present or alternatively yum reinstall clamav-data

Expected behavior

The files main.cvd , daily.cvd and bytecode.cvd are not restored

Actual behavior

The files main.cvd , daily.cvd and bytecode.cvd are restored and at the next reload of the service the signatures are loaded into RAM.

Current workaround:

yum remove clamav-data
systemctl reload clamd@rspamd

Components

nethserver-antivirus-1.4.2-1.ns7.noarch
clamav-data.noarch 0:0.102.2-4.el7

See also
We suggest adding an Obsoletes: clamav-data to the nethserver-antivirus package

[nethbot]

in 7.7.1908/testing:

• nethserver-antivirus-1.4.2-1.1.gf936d44.ns7.noarch.rpm x86_64 armhfp aarch64

[gsanchietti]

Test case 1

• Upgrade a machine where clamav-data is already installed
• Check the official signatures are gone
• Force clamav reload with systemctl reload clamd@*

Test case 2

• Install on a clean machine
• Check official signatures are not downloaded at all

[lucagasparini]

Test case 1: VERIFIED
Test case 2: VERIFIED

[nethbot]

in 7.7.1908/updates:

• nethserver-antivirus-1.5.0-1.ns7.noarch.rpm x86_64 armhfp aarch64