The deaddrop 4.6.1 release

This is a bugfix release which fixes regressions since previous release. It also include fixes to help some customers that run large installations that need reduced load on their systems. Also included is some cleanup in the e-mail that is used for communicating with admins and users when the malware check find a malware in a transferred file.

Deaddrop fixes

  • mcsd: Add missing syscall to seccomp filters seen on certain workloads
  • mcsd: Add private nsswitch to reduce possible syscall paths
  • metadataservice: Add missing syscall to seccomp filters seen on certain workloads
  • metadataservice: Add private nsswitch to reduce possible syscall paths
  • avplugin: Reduce CPU usage by reducing clamav invocations
  • ddauto: Limit parallell dispatch execution to better deal with high load. Make it configurable
  • SELinux: Reduce AVC:s related to getattr from ddbackend_jobcard_t
  • ddadm: Add user interface to toggle amount of parallell dispatches
  • email: rewording and formatting of malware notification email

Documentation

  • documentation: Add documentation for max_concurrent_jobs setting

SBOM

Each ISO and VHD release has a software bill of materials (SBOM), to make introspection of the release easy to integrate with a number of security tools.

Operating system packages

All system components have been updated to their latest respective version.

Update Instructions

The release will be automatically installed as part of the regular update process.

No manual steps are required from administrators or users. The system will apply the update seamlessly in the background, ensuring that the latest fixes are in place with minimal interruption to normal operations.

Sysctl portal

https://portal.sysctl.se/

Sysctl rss/atom

https://sysctl.se/feed.xml