Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of ziggythehamster@gmail.com
 designates 209.85.161.172 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=PJor5Fzmn014ip1epV9rGXFF6GVetHBVi2W4CFKDC9vrIR2aJM+v+ACwDW/Z7N+Z7U
         R2Q7nNOSNifiLvWe4PLaJfgIxzkEQHQWbnspxklPL4+Jacfo5+0LyePxXLGnDG9wcF2d
         5S3Zi/UFwgF1QYzrhFqvcMp3SN5CckqdPSkvA=
MIME-Version: 1.0
In-Reply-To: <12623878.1554641289908630584.JavaMail.defaultUser@defaultHost>
References: <12623878.1554641289908630584.JavaMail.defaultUser@defaultHost>
Date: Tue, 16 Nov 2010 09:50:44 -0600
Message-ID: <AANLkTin9TO3qVOdYRamEvRkeCh0t+yLCcnwso9jkmBcb@mail.gmail.com>
Subject: Re: content / attachment scanning
From: Keith Gable <ziggythehamster@gmail.com>
To: user@couchdb.apache.org
Content-Type: text/plain; charset=ISO-8859-1

On Tue, Nov 16, 2010 at 5:57 AM, bacco77@libero.it <bacco77@libero.it> wrote:
> I was wondering whether Couch-Db has anything for visurs scanning while uploading attachments.
> I don't know, something like a Symantec remote service,configurable, etc. And a quarantine to put those files checked positive.

On CouchDB, you'd do this in your application before attaching the
file. Ideally, you'd have CouchDB set up in such a way that a virus
would not be able to do any damage if, for some reason, it executed. I
personally use Grsecurity to accomplish this on my production servers
(which aren't running CouchDB but should work with CouchDB).

If you wanted to use CouchDB to host a virus database, then you'd want
to store a property for if it was scanned and the result of the scan.
Just having a file attached isn't going to "infect" a computer. You
have to execute the program, and I'm not sure that CouchDB stores
attachments in such a way that it would be possible to do that.