IRSS: Virus-Scanner for Resources as Cron-Job

1 Initial Problem

In ILIAS, files - if activated and configured - are checked for viruses when uploading new files. This means that known viruses are only detected at the time of the upload; at a later point in time, the files are no longer checked.

2 Conceptual Summary

By centralising files in the IRSS, we have the possibility to regularly check all files of the IRSS for viruses via a cronjob. For this purpose, a new cron job is to be developed that uses the existing virus scanner (if activated) to check all resources (files) in the IRSS for viruses.

If a virus is detected, a QuarantineStakeholder is added to the resource. Resources that have the QuarantineStakeholder assigned can no longer be used via the Consumers. The access is answered with a ResourceInQuarantineException.

This is preparatory for later features:

• An overview of all resources in "quarantine" can be offered in the administration (not part of this feature request).
• Resources in "Quarantine" can then be deleted manually or via another cron job, for example. However, all stakeholders must support the deletion of resources in order to be able to react to the deletion (not part of this feature request).

3 User Interface Modifications

3.1 List of Affected Views

• New cronjob "Virus scan in the storage service" in Administration > General Settings > Cron Jobs

3.2 User Interface Details

No modifications to the user interface

3.3 New User Interface Concepts

no new user interface concepts

3.4 Accessibility Implications

The existing forms and possibilities of the cronjob administration are used and no new elements are added which would have to or could be considered from A11y's point of view.

4 Technical Information

The cronjob can be activated even if no virus scanner is configured in ILIAS, but then it has no function. The message of the cronjob then ends with the information that no virus scanner is installed.

5 Privacy

No new or existing personal data will be collected, stored or processed as part of this feature.

6 Security

Security is improved as part of this feature, as files can also be checked for viruses at a later time after they have been uploaded. This feature should not lead to any new attack vectors.

7 Contact

• Author of the Request: Schmid, Fabian [fschmid]
• Maintainer: Schmid, Fabian [fschmid]
• Implementation of the feature is done by: sr.solutions

8 Funding

If you are interest in funding this feature, please add your name and institution to this list.

• …

9 Discussion

JourFixe, ILIAS [jourfixe], 26 JUN 2023 : We highly appreciate this suggestion and schedule the feature for ILIAS 9.

10 Implementation

{ The maintainer has to give a description of the final implementation and add screenshots if possible. }

Test Cases

Test cases completed at {date} by {user}

• {Test case number linked to Testrail} : {test case title}

Privacy

Information in privacy.md of component: updated on {date} by {user} | no change required

Approval

Approved at {date} by {user}.