[clamav-users] clamscan --disable-cache

[G.W. Haywood]

Hi there,

On Wed, 30 Sep 2020, Dave Sill via clamav-users wrote:

> "G.W. Haywood via clamav-users" <clamav-users at lists.clamav.net> wrote:
>>
>> There are ways around that, even if you don't want to run clamdscan
>> (and clamd) as root - which I'd entirely understand.
>
> Is --fdpass one of them? And --stream? Any others?

No.  I'd be thinking out-of-the-box, such as (dual) booting out of
office hours with a tiny OS just for ClamAV, maybe mount partitions
read-only; or you could have a process which does have the necessary
permissions temporarily copy the files that you want to scan to some
sandbox area; that kind of thing.  It would need some effort, and in
your case it sounds like something like Puppet might help.

-- 

73,
Ged.