AUTHOR: kmcgrail@pccc.com

We use McAfee's Command Line Scanner for Unix with MIMEDefang.  Since McAfee is end of lifing the 4400 product at the end of January 2007, others might benefit.

In short, we have some older but perfectly good boxes running that we want to upgrade with the Linux version of McAfee (Uvscan).  However, the current version (5100) no longer is compiled where it will work on machines without GCC 3.2.

This means that on older machines that predate GCC 3.2, it won't work.  It also means that on newer machines like CentOS 4, you have to load compat-libstdc++-33-3.2.3-47.3 RPMs because GCC 3.2.3 was released in 2002/2003 so it's already outdated, sigh.

ldd uvscan
        liblnxfv.so.4 => /usr/local/lib/liblnxfv.so.4 (0x40018000)
        libstdc++.so.5 => not found
        libm.so.6 => /lib/libm.so.6 (0x4046a000)
        libgcc_s.so.1 => not found
        libc.so.6 => /lib/libc.so.6 (0x4048d000)
        libdl.so.2 => /lib/libdl.so.2 (0x405cc000)
        libstdc++-libc6.2-2.so.3 => /usr/lib/libstdc++-libc6.2-2.so.3
(0x405d1000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

What I've done is downloaded the source to GCC 3.2.3 and run the following
commands:

cd /files
wget http://www.pccc.com/downloads/MIMEDefang/contrib/mcafee/gcc-3.2.3.tar.bz2

cd /usr/src/
tar jxvf /files/gcc-3.2.3.tar.bz2
cd gcc-3.2.3

./configure --prefix=/usr/local/gcc3.2.3
#-j OK
make -j9
make install

vi /etc/ld.so.conf 
#add /usr/local/gcc3.2.3/lib as the last entry (NOTE: if you have a machine with /etc/ld.so.conf.d/, you probably don't need to be reading this document)
ldconfig -v



I then install the McAfee 5100 Engine and all seems to work fine.

ldd uvscan
        liblnxfv.so.4 => /usr/local/lib/liblnxfv.so.4 (0x40018000)
        libstdc++.so.5 => /usr/local/gcc3.2.3/lib/libstdc++.so.5
(0x4046a000)
        libm.so.6 => /lib/libm.so.6 (0x4051f000)
        libgcc_s.so.1 => /usr/local/gcc3.2.3/lib/libgcc_s.so.1 (0x40542000)
        libc.so.6 => /lib/libc.so.6 (0x4054a000)
        libdl.so.2 => /lib/libdl.so.2 (0x40689000)
        libstdc++-libc6.2-2.so.3 => /usr/lib/libstdc++-libc6.2-2.so.3
(0x4068e000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

./uvscan --version
Virus Scan for Linux v5.10.0
Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832  LICENSED COPY - May 26 2006

Scan engine v5.1.00 for Linux.
Virus data file v4919 created Dec 14 2006
Scanning for 220893 viruses, trojans and variants.


We've been running this on production servers without issue now for several weeks as we prepare for the January 31, 2007 deadline.

However, since I little experience compiling compilers and stdc libs, I've still got the following questions if anyone can answer them:

a) will this cause issues with other programs on the server?

b) is there a better way to compile gcc (perhaps gcc core?) where you just
get the libgcc_s.so.1 & libstdc++.so.5?

Love to hear from anyone else dealing with this issue out there or who has any experience with libstdc / gcc issues.