[clamav-users] OnAccessExcludePath being ignored.

[Franky Van Liedekerke]

Op Donderdag, 26-09-2019 om 11:22 schreef G.W. Haywood via clamav-users:
> Hi there,
> 
> On Thu, 26 Sep 2019, CROFT Ian wrote:
> 
> > But when I put an EICAR test txt file in /var/log/test.txt it is getting picked up by the OnAccess scanner.
> >
> > I have tried ^/var/log/ and ^/var/log/* - same issue the test.txt is still picked up by the OnAccess scanner when it should in my mind be being ignored.
> >
> > Any ideas ?
> 
> You really do need to get used to reading the 'man' pages.
> 
> In this case the man page for clamd.conf states
> 
>         OnAccessExcludePath STRING
> 
> which means that the argument is a STRING, not a REGEX.
> 
> You must not put things like '^' and '*' in a STRING argument
> because a STRING is taken literally.  You are excluding names
> which do not exist on your system.

While Ian just followed my example (which was wrong apparently), it is kind of confusing in clamd.conf:

ExcludePath REGEX
OnAccessExcludePath STRING

Easy enough to miss ...

Franky