I’ve attempted to install the clamav plugin from the Github ojs-dev-2_4 branch on OJS 2.4.8.5 and it seems to install and configure successfully, however when I test it by uploading the EICAR test virus via new author submission, the file is not blocked and the virus is not detected.
I’ve performed the same test with the plugin installed from the plugin gallery on OJS 3.3 and configured it with the same clamav path (/usr/bin/clamscan). It successfully detected the EICAR test virus via new author submission as expected.
Is there is working version of this plugin for OJS 2.4.x?
Hi @John_Grobler,
Highly doubtful that there is another version that would work for 2.4, other than the version that you noted (which appears to be the last version developed for 2.4, according to the Github Repo: GitHub - ulsdevteam/pkp-clamav: Clam AV plugin for PKP OJS / OMP) . OJS 2.4 is really out-of-date and no longer supported - it is not recommended for use, so if you are using it, we highly recommend upgrading. On the off-chance that it is, @ctgraham may be able to speak to this.
-Roger
PKP Team
Crossposting from Plugin version working with OJS 2.4 · Issue #22 · ulsdevteam/pkp-clamav · GitHub
Be aware that PKP does not support OJS 2.4.x any longer and it is not maintained for with respect to any security or functional flaws. Following PKP’s maintenance cycle, the Pitt ULS only supports our plugins for currently supported releases of PKP software.
That said, I believe the plugin to have been functional as of the last supported OJS 2.4.8 release, via the ojs-dev-2_4 branch. My first sanity check would be try switching between the “socket” configuration and the “executable” configuration to test if one method works over the other. (For example, selinux permissions may restrict socket or executable connections for some systems.) The most effective configuration I have found is configuring clamdscan as the executable, with the benefit of using the daemon, but bypassing the complexity of the socket configuration.
1 Like