[clamav-users] DoD/IL4/Federal use case

[Ivan Zanoth]

Hope you enjoy :)

Em ter., 19 de abr. de 2022 às 19:22, G.W. Haywood via clamav-users <
clamav-users at lists.clamav.net> escreveu:

> Hi there,
>
> On Tue, 19 Apr 2022, Enver Bahar via clamav-users wrote:
>
> > I tried before but didn't get a response, any directions would be great:
> >
> > I read on some forums that ClamAV is approved for federal use and
> > approved by DoD for IL4 - is that correct? If so, where can I find
> > such information?
>
> I didn't respond before because I don't have much to say that might
> help you, but as you've asked again I'll give you what I know, which
> I'm afraid is very little.
>
> I've been using ClamAV for a couple of decades and AFAICR you're the
> first to ask this question on the mailing list.  The first time I saw
> your question I did a quick search, and nothing I found seemed to be
> supportive of statements that "ClamAV is approved" by any particular
> government organization.  However if you look at
>
> https://cloud.gov/docs/ops/repos/
>
> you will see the ClamAV is at least in use in US government circles.
> This sort of thing will often be misunderstood by people carelessly
> posting information of dubious quality on SomeInternetForumOrOther.
>
> If it's important to you, as has been said you'd probably be best
> advised to talk to the relevant government departments directly.  I
> think there'll be a lot more to it than "Clamav is approved for...",
> because ClamAV can only ever be one small part of a whole system whose
> security really must be assessed as a whole - not piecemeal.  ClamAV
> can be used intelligently and carefully, or it can be (and frankly I
> think very often is) used thoughtlessly.  I suspect that the latter
> wouldn't make a good impression at the DoD.  Rather than a blanket
> "yes, it's approved" you're far more likely to find yourself wading
> through things like this
>
>
> https://dl.dod.cyber.mil/wp-content/uploads/devsecops/pdf/DevSecOps_Enterprise_Container_Image_Creation_and_Deployment_Guide_2.6-Public-Release.pdf
>
> which I mention here not because it seems outstandingly relevant, but
> because it reminds me of a friend who, long ago, expressed the opinion
> that "an elephant is a greyhound, built to government specifications".
> At that time I was working for our government, it did make me laugh. :)
>
> --
>
> 73,
> Ged.
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220419/811adbcc/attachment.htm>