Enrico Scholz 89d1aeb
Index: clamav-0.97.1/etc/clamd.conf
Enrico Scholz 89d1aeb
===================================================================
Enrico Scholz 89d1aeb
--- clamav-0.97.1.orig/etc/clamd.conf
Enrico Scholz 89d1aeb
+++ clamav-0.97.1/etc/clamd.conf
Enrico Scholz 89d1aeb
@@ -469,6 +469,16 @@ Example
Enrico Scholz e23ab1c
 # Default: yes
Enrico Scholz e23ab1c
 #Bytecode yes
Enrico Scholz e23ab1c
 
Enrico Scholz e23ab1c
+# Bytecode mode
Enrico Scholz e23ab1c
+#
Enrico Scholz e23ab1c
+# This option has been set to 'ForceInterpreter' in Fedora due to
Enrico Scholz e23ab1c
+# security concerns by default.  You might need to enable the
Enrico Scholz e23ab1c
+# 'clamd_use_jit' SELinux boolean after setting this option to the
Enrico Scholz e23ab1c
+# more efficient 'ForceJIT' value.
Enrico Scholz e23ab1c
+#
Enrico Scholz e23ab1c
+# Default: ForceInterpreter
Enrico Scholz e23ab1c
+#ByteCodeMode ForceInterpreter
Enrico Scholz e23ab1c
+
Enrico Scholz e23ab1c
 # Set bytecode security level.
Enrico Scholz e23ab1c
 # Possible values:
Enrico Scholz e23ab1c
 #       None - no security at all, meant for debugging. DO NOT USE THIS ON PRODUCTION SYSTEMS
Enrico Scholz 89d1aeb
Index: clamav-0.97.1/shared/optparser.c
Enrico Scholz 89d1aeb
===================================================================
Enrico Scholz 89d1aeb
--- clamav-0.97.1.orig/shared/optparser.c
Enrico Scholz 89d1aeb
+++ clamav-0.97.1/shared/optparser.c
Enrico Scholz 89d1aeb
@@ -264,7 +264,7 @@ const struct clam_option __clam_options[
Enrico Scholz 89d1aeb
     { "BytecodeUnsigned", "bytecode-unsigned", 0, TYPE_BOOL, MATCH_BOOL, 0, NULL, 0, OPT_CLAMD | OPT_CLAMSCAN, 
Enrico Scholz 89d1aeb
 	"Allow loading bytecode from outside digitally signed .c[lv]d files.\n","no"},
Enrico Scholz 89d1aeb
 
Enrico Scholz e23ab1c
-    { "BytecodeMode", "bytecode-mode", 0, TYPE_STRING, "^(Auto|ForceJIT|ForceInterpreter|Test)$", -1, "Auto", FLAG_REQUIRED, OPT_CLAMD | OPT_CLAMSCAN,
Enrico Scholz e23ab1c
+    { "BytecodeMode", "bytecode-mode", 0, TYPE_STRING, "^(Auto|ForceJIT|ForceInterpreter|Test)$", -1, "ForceInterpreter", FLAG_REQUIRED, OPT_CLAMD | OPT_CLAMSCAN,
Enrico Scholz e23ab1c
 	"Set bytecode execution mode.\nPossible values:\n\tAuto - automatically choose JIT if possible, fallback to interpreter\nForceJIT - always choose JIT, fail if not possible\nForceIntepreter - always choose interpreter\nTest - run with both JIT and interpreter and compare results. Make all failures fatal\n","Auto"},
Enrico Scholz e23ab1c
 
Enrico Scholz 89d1aeb
     { "DetectPUA", "detect-pua", 0, TYPE_BOOL, MATCH_BOOL, 0, NULL, 0, OPT_CLAMD | OPT_CLAMSCAN, "Detect Potentially Unwanted Applications.", "yes" },