[clamav-users] clamonaccess scanning doesnot see /tmp/eicar.com

[G.W. Haywood]

Hi there,

On Mon, 6 Jul 2020, Eric van Rheenen via clamav-users wrote:

> I'm running clamav 0.102.3 on RedHat 7.8 servers.
> When i use OnAccessMountPath ...
> [...]
> Please tell me what i'm doing wrong ?

It is not clear to me that you are doing anything wrong, at least in
part because it is not clear to me exactly what you are trying to do,
and you have edited the log content som much that I, at least, do not
understand it (and does /var/log/messages really have no timestamps)?

You give the OnAccessIncludePath value as '/tmp' but you do not make
clear the value assigned to 'OnAccessMountPath'.  Please clarify.  In
the first example, did you expect clamd to be looking at /etc (and at
things you _know_ that it will not be able to read) as well as /tmp?

In each case, to trigger scanning, how was the test file accessed?

Have you read 'https://www.clamav.net/documents/on-access-scanning'
and in particular the 'Curl' requirements?

-- 

73,
Ged.