[clamav-users] Run script on file scanned but no virus found

Reindl Harald h.reindl at thelounge.net
Thu Nov 2 17:43:18 UTC 2017



Am 02.11.2017 um 18:31 schrieb Genet Bouron:
> Quit being an ass. Your recent posts have taken a very negative tone. You have been kicked off of other lists because you are rude and impolite. Just stop talking.
> 
> STOP IT and grow up.

i can't remember that i asked you!

anything based on "creates this additional file within 0.025 seconds" is 
broken by design while calling clamdscan directly is free of 
race-conditions and combined with mod_security you can fire up a script 
realtime within file uploads

SecRule FILES_TMPNAMES "@inspectFile 
/etc/httpd/modsecurity.d/check-upload.php" 
"id:'141',phase:2,block,status:400,t:none"

so until you have nothing technical to say just shut up

> Am 02.11.2017 um 16:28 schrieb Chris Johnson:
>> PHP checks for the existence for the file with (deleted) in the file
>> name, blocks the addition of this file to our records and deletes it.
>> Clam AV typically creates this additional file within 0.025 seconds
>> when testing with the eicar test file
>>
>> Is there a way of getting clamd to run a script when a virus is not found?
> 
> why in the world don't you use clamdscan with exec() from your php-script and deal with the return value instead of such constructs with race conditions?



More information about the clamav-users mailing list