##osx-server

macmule: i'm blocked at leadership levels to even have the discussions with the people making those decisions. I'm a contractor here as well - hard to push those sort of lines

hunty1_: I believe there is an autopkg recipe for clamxav already.

yes, there is

I checked

hunty1_: also, if it doesn't have a console.. they'll want reports on it.. so might be good to have a look at those that have EA's in the JSS as it makes reporting much easier

sweet i'll check it out today

thanks guys :)

i'm sure ClamXAV has built in EA's

macmule: no casper here ;)

hunty1_ sounds like the worst possible place to work. Hope you are getting paid $$$$ and I pray for your sanity they don't call you back too often

hunty1_: let me tell you about this wonderful tool called Absolute Manage

:D

hunty1_: so how are they going to report that the AV policy is being enforced?

rmanly: swings and roundabouts. Not many places you get to play at this scale gotta take the good with the bad

macmule: why, with absolute manage of course!

:D

macmule: if the schools turn it off then its on them. but we (central it) can't put out a build with AV off/disabled etc etc. We would get smashed by leadership

when i say we, i mean me as there really is an I in mac team

make an av scanner with this http://c2.com/cgi/wiki?HollywoodOs

hunty1_: right... but normally those policies require reports to show that the policy is being enforced.. which is weird if they don't want/need that

macmule It isn't a *REAL* requirement. That is the bs frustrating thing about this. Some CTO from the dark ages of IT made a policy and by god that policy will be enforced

users be damned

:P

rmanly: correct

rmanly: heh.. they would not like me

yay!

simple fixes

macmule: The scenario is this, virus gets spread somehow - audits are done - they find that a machine was built by central it without av, or it was disabled = i get fired

nor I. Luckily I have a very good partner for navigating complex political situations.

he proofreads emails etc.

lol

macmule: or machine was built with AV on and included, but the school admin disabled it. school admin cops the heat

hunty1_: yea.. i've been in positions like that... but been able to prove my case..

hunty1_: how could you prove it's the school admin?

rmanly: i can be a stubborn ass at times

macmule: so this is the education department for a state. 1.5million users

macmule: in AD

macmule: well, you still use casper, so that's obvious

;)

because the central IT buildout workflow has av included

hunty1_: AD shows if AV has been disabled?

dknuth: you still here? :P

macmule: lol no i was just mentioning that we have 1.5million users in AD to give you an idea of the size of the org

macmule: yep, I'm not going anywhere.

hunty1_: well sounds like a good fight

hunty1_: HNY man!

macmule: so its a deploystudio & munki environment

hunty1_: awesome!

Allister HNY you too buddy, i've missed your snarky tweets on the twitters

hunty1_: gotta put a lid on the negativity

Allister: the snark might cut through the deluge of "Did 10.10.2 fix the login lockout issue?"

Allister: hahaha

macmule: no, but I hear breaking NDA did!

also, I'm hurt, Allister's never that happy to see me :P

brb breaking NDA

dknuth: you're a little closer to my time zone

fair point

g'night ladies and germs

dknuth: that was not a smart move by that guy on JN

macmule: yeah, I'm pretty sure that apple will get kinda uppity about that

alright im off to have a play with clamAV and a couple others thanks for the help

later hunty!

dknuth: no doubt..

I'm personally rather uppity that the OS has been out this long without this getting fixed

macmule: good luck with autocasper nbi ;)

dknuth: i grabbed a copy of the dawrinup fix

hunty1_: thanks you'll have a beta coming your way

darwinup fix?

dknuth: that's the fix that Apple are giving out to enterprise customers.. the one that the guy on JN linked too

dknuth: not for the meek

macmule: oh, so basically they're using an opensource solution to fix their own crappy code? XD

dknuth https://jamfnation.jamfsoftware.com/discussion.... ... got taken down already

arrose: good

I hope the user also got banned

I'm sure the assassins are already done

Allister: were you here when the fun happened?

iSassins?

I think so

dknuth: but i grabbed a copy anyways..

arrose: mossad

black helicopters

hey, Frank's back!

Frank's on an odds streak

might be time to block svhum-ans347.bargi.uit.no

Allister: i blocked Frank 3-7 earlier,, then 8 5 hours later.. then 9 popped in

guess an ignore works

Do we need to ban Frank for a bit? Because I can.

Bring down the hammer!

idk he isnt hurting anything?

frogor: i banned Frank3-8 earlier.. then 9 popped up