[EP-tech] Re: Virus Scan during Upload

Brian D. Gregg bdgregg at pitt.edu
Mon Jan 25 15:52:39 GMT 2016


Martin,

This is what we us in our IR (running EPrints 3.2.8).  It could probably be written a bit better (obviously - feel free to tweak as anyone sees fit), but works as is for us currently.  You will need ClamAV installed (including the associated PERL modules).

This part goes into the cfg/cfg.d/document_validate.pl file under the "CHECKS IN HERE" comment but before the "return ( @problems );"

        # Virus scan the uploaded files.
        my %files = $document->files;
        my $path = $document->local_path;
        while ( my ($filename, $size) = each(%files)) {
                # for each file uploaded
                use File::Scan::ClamAV;
                my $av = new File::Scan::ClamAV(find_all => 1, port=> '/tmp/clamd');
                my $filetoscan = "$path/$filename";
                my %caught = $av->scan("$filetoscan");
                while (my ($k,$v) = each %caught ) {
                        # Viruses Found
                        push @problems,
                                $session->html_phrase( "validate:virus_found",
                                        filename => $session->make_text($filename),
                                        virus => $session->make_text($v) );
                }
        }
        # End Virus scan.

And the HTML Phrase can go into the file cfg/lang/en/validate.xml

<epp:phrase id="validate:virus_found">The file that has been uploaded contains a virus.  The file in question is: <epc:pin name="filename"/>.  It contains the virus: <epc:pin name="virus"/>. Please remove the file and upload a virus free version.</epp:phrase>

Hope this helps or at least points you in a direction as to what you might need.

Thanks,
Brian Gregg.

Brian D. Gregg
Solutions Architect | Manager Systems Development
University of Pittsburgh | University Library System
Address: 7500 Thomas Blvd.  Room 129 Pittsburgh, PA 15208<https://maps.google.com/maps?q=7500+Thomas+Blvd,+Pittsburgh,+PA&hl=en&sll=41.117935,-77.604698&sspn=7.662465,13.73291&oq=7500+Tho&t=h&hnear=7500+Thomas+Blvd,+Pittsburgh,+Pennsylvania+15208&z=17>
Tel: (412) 648-3264 | Email: bdgregg at pitt.edu<mailto:bdgregg at pitt.edu> | Fax: (412) 648-3585
https://orcid.org/0000-0001-6541-4544



From: eprints-tech-bounces at ecs.soton.ac.uk [mailto:eprints-tech-bounces at ecs.soton.ac.uk] On Behalf Of martin.braendle at id.uzh.ch
Sent: Monday, January 25, 2016 10:19 AM
To: eprints-tech at ecs.soton.ac.uk
Subject: [EP-tech] Virus Scan during Upload


Hi,

in the course of a Swiss Digital Lifecycle Management Project, we are evaluating EPrints and our repo according to the POWRR scheme (gap analysis) to find tools for digital preservation.

One criterion is virus scan of a document before it is uploaded. I have found this old thread: http://www.eprints.org/tech.php/thread-16755.html

Has anyone followed up on this, implemented a hook and is willing to share code?

Thank you for all your advice and help.

Martin

--
Dr. Martin Brändle
Zentrale Informatik
Universität Zürich
Stampfenbachstr. 73
CH-8006 Zürich
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20160125/b211fe5c/attachment.html 


More information about the Eprints-tech mailing list