Hi there,
On Tue, 19 Apr 2022, Enver Bahar via clamav-users wrote:
> I tried before but didn't get a response, any directions would be great:
>
> I read on some forums that ClamAV is approved for federal use and
> approved by DoD for IL4 - is that correct? If so, where can I find
> such information?
I didn't respond before because I don't have much to say that might
help you, but as you've asked again I'll give you what I know, which
I'm afraid is very little.
I've been using ClamAV for a couple of decades and AFAICR you're the
first to ask this question on the mailing list. The first time I saw
your question I did a quick search, and nothing I found seemed to be
supportive of statements that "ClamAV is approved" by any particular
government organization. However if you look at
https://cloud.gov/docs/ops/repos/ you will see the ClamAV is at least in use in US government circles.
This sort of thing will often be misunderstood by people carelessly
posting information of dubious quality on SomeInternetForumOrOther.
If it's important to you, as has been said you'd probably be best
advised to talk to the relevant government departments directly. I
think there'll be a lot more to it than "Clamav is approved for...",
because ClamAV can only ever be one small part of a whole system whose
security really must be assessed as a whole - not piecemeal. ClamAV
can be used intelligently and carefully, or it can be (and frankly I
think very often is) used thoughtlessly. I suspect that the latter
wouldn't make a good impression at the DoD. Rather than a blanket
"yes, it's approved" you're far more likely to find yourself wading
through things like this
https://dl.dod.cyber.mil/wp-content/uploads/devsecops/pdf/DevSecOps_Enterprise_Container_Image_Creation_and_Deployment_Guide_2.6-Public-Release.pdf which I mention here not because it seems outstandingly relevant, but
because it reminds me of a friend who, long ago, expressed the opinion
that "an elephant is a greyhound, built to government specifications".
At that time I was working for our government, it did make me laugh. :)
--
73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml