File clamav-0.98.3-jitoff.patch of Package clamav

File clamav-0.98.3-jitoff.patch of Package clamav (Revision e1ec5bb7955f026b6ac88eedf0acc925)

Currently displaying revision e1ec5bb7955f026b6ac88eedf0acc925 , Show latest

--- clamav-0.98.3/etc/clamd.conf.sample		2014-05-06 20:39:56.000000000 +0200
+++ clamav-0.98.3/etc/clamd.conf.sample.jitoff	2014-05-10 22:20:49.000000000 +0200
@@ -564,6 +564,16 @@
 # Default: yes
 #Bytecode yes
 
+# Bytecode mode
+#
+# This option has been set to 'ForceInterpreter' in Fedora due to
+# security concerns by default.  You might need to enable the
+# 'clamd_use_jit' SELinux boolean after setting this option to the
+# more efficient 'ForceJIT' value.
+#
+# Default: ForceInterpreter
+#ByteCodeMode ForceInterpreter
+
 # Set bytecode security level.
 # Possible values:
 #       None - no security at all, meant for debugging. DO NOT USE THIS ON PRODUCTION SYSTEMS
--- clamav-0.98.3/shared/optparser.c		2014-05-06 20:42:41.000000000 +0200
+++ clamav-0.98.3/shared/optparser.c.jitoff	2014-05-10 22:21:27.000000000 +0200
@@ -295,7 +295,7 @@
     { "BytecodeUnsigned", "bytecode-unsigned", 0, TYPE_BOOL, MATCH_BOOL, 0, NULL, 0, OPT_CLAMD | OPT_CLAMSCAN, 
 	"Allow loading bytecode from outside digitally signed .c[lv]d files.","no"},
 
-    { "BytecodeMode", "bytecode-mode", 0, TYPE_STRING, "^(Auto|ForceJIT|ForceInterpreter|Test)$", -1, "Auto", FLAG_REQUIRED, OPT_CLAMD | OPT_CLAMSCAN,
+    { "BytecodeMode", "bytecode-mode", 0, TYPE_STRING, "^(Auto|ForceJIT|ForceInterpreter|Test)$", -1, "ForceInterpreter", FLAG_REQUIRED, OPT_CLAMD | OPT_CLAMSCAN,
 	"Set bytecode execution mode.\nPossible values:\n\tAuto - automatically choose JIT if possible, fallback to interpreter\nForceJIT - always choose JIT, fail if not possible\nForceIntepreter - always choose interpreter\nTest - run with both JIT and interpreter and compare results. Make all failures fatal.","Auto"},
 
     { "BytecodeStatistics", "bytecode-statistics", 0, TYPE_BOOL, MATCH_BOOL, 0, NULL, 0, OPT_CLAMSCAN | OPT_CLAMBC, "Collect and print bytecode execution statistics.", "no" },