[Clamav-devel] On write close scan with Fanotify

David Collins davetha at gmail.com
Thu Jan 24 16:13:42 EST 2019

I work with a large environment that is extremely file open heavy.
Over the years, we have either avoided access scanning all together,
or had clam hook into file upload events in specific daemons (mail,
ftp etc..).

Many proprietary AV solutions support scan on close which work well on
environments similar to mine.

I've written a fully usable PoC, including a OnWriteClose option to
toggle it on and off.  Before I start writing documentation for the
option, I'd like to see if this is a feature the ClamAV would value.

Link to clamav-devel fork&commit
Thanks in advance!

More information about the clamav-devel mailing list