[clamav-users] OnAccessExcludePath being ignored.
Micah Snyder (micasnyd)
micasnyd at cisco.com
Fri Sep 27 17:38:54 UTC 2019
Ged, all,
Sorry about that. We have to make a conscious decision to remove the automatic "Security group" marker from Bugzilla tickets, and while we try to make a habit to do so - we forgot on this one.
https://bugzilla.clamav.net/show_bug.cgi?id=12306 should now be viewable.
-Micah
On 9/26/19, 1:18 PM, "clamav-users on behalf of G.W. Haywood via clamav-users" <clamav-users-bounces at lists.clamav.net on behalf of clamav-users at lists.clamav.net> wrote:
Hello again,
On Thu, 26 Sep 2019, CROFT Ian via clamav-users wrote:
> ... making sure they are all strings looks better now in most cases.
>
> So I now have these :-
>
> OnAccessIncludePath /var/log
> ( Only added to include to get around the bug previously mentioned )
>
> OnAccessIncludePath /var
>
> OnAccessExcludePath /var/log
>
> However eicar test as /var/log/test.txt is still being picked up.
>
> Its working fine on other real sub directories ( not separate munts ),
> feels like this is falling foul of the fact /var/log is a sub mount
> point perhaps.
Hmmmm. Bugs or no bugs it seems rather willful having both of these:
OnAccessIncludePath /var/log
OnAccessExcludePath /var/log
and I'm not surprised that things seem a bit insane if you do. :)
Unfortunately on bugzilla, issue 12306 itself is restricted access.
Because of that I didn't even know of its existence - I've trawled
through every issue listed in the components pages at
https://bugzilla.clamav.net/describecomponents.cgi?product=ClamAV
and AFAICT it doesn't appear in any of them. So I don't think I can
add anything useful to what I've already said. To repeat what I've
already said, I think scanning /var/log isn't a great idea.
--
73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users at lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
More information about the clamav-users
mailing list