Knowledgebase
fp.so not working properly with Samba on Ubuntu 10.04
Posted by Finnbogi Finnbogason on 24/07/2014 11:21

Problem description:

A bug in our current version of F-PROT Antivirus for Linux (File servers and Mail servers editions) where the Preloadable Library Call Wrapper (fp.so) does not work properly since Ubuntu 10.04. This problem was found on Ubuntu 10.04 Server LTS (32-bit) but it may affect other platforms/flavours as well. The result is that fp.so fails to protect Samba shares by scanning their content upon external access.

Solution (workaround):

Yes, there is a workaround provided here, which is a shell script that properly prepares Samba for using fp.so for protecting the shares.
Please use this workaround only if advised to do so by our Tech Support team.


Instructions:

  1. First, download the shell script from the below link:

    Download fp_preld.tgz
  2. Extract the shell script from the downloaded archive to F-PROT's install path (e.g. /opt/f-prot).
  3. Now change to the directory where the F-PROT and the shell script reside and run the shell script:

    sudo ./fp_preld.sh

    NOTE:  The shell script will start/restart Samba if changes were made to the Samba configuration.

  4. Test the Samba network shares to verify that fp.so is working properly. We recommend using EICAR for testing, i.e. by placing a copy of the EICAR testfile on the Samba share and attempt to execute/open it from a remote system.




F-PROT Antivirus and Command Anti-Malware are products of CYREN