[clamav-users] ClamAV 0.100.1 - clamd signal 11, leaves unix domain socket behind?

[Karl Pielorz]

--On 21 September 2018 17:14 +0100 "G.W. Haywood" 
<clamav at jubileegroup.co.uk> wrote:

> Hi there,
>
> On Fri, 21 Sep 2018, Karl Pielorz wrote:
>
>> ... it gets delivered if it fails during the scan ...
>
> It doesn't have to be that way, and if someone knows a way to stop
> clamd then maybe they could use it to get past your defences.

This is true, but not always avoidable in high volume situations... It's 
arguable if they can get clamd to crash anyway - delivering non-scanned may 
not be your largest concern :)

-Kp