[clamav-users] OnAccessScan doesn't prevent Access

[Andreas Schulze]

Am 08.11.18 um 10:25 schrieb vamp898:
> This is how the logs looks like when i do this
> 
> Thu Nov  8 10:13:51 2018 -> ScanOnAccess: notifying only for access attempts.
> Thu Nov  8 10:13:51 2018 -> ScanOnAccess: Protecting '/var/www/localhost/htdocs/nextcloud/data' and rest of mount.
> Thu Nov  8 10:13:51 2018 -> ScanOnAccess: Max file size limited to 52428800 bytes
> Thu Nov  8 10:15:09 2018 -> ScanOnAccess: /var/www/localhost/htdocs/nextcloud-14.0.3/data/administrator/files/eicar.com: Eicar-Test-Signature FOUND
> 
> Any help highly appriciated =)

looks like a bug: https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.101/clamd/onaccess_fan.c#L155

the second condition should not be negated for my feeling.

-- 
A. Schulze
DATEV eG