[clamav-users] ClamAV MD5 sum based whitelists (*.fp) don’t work in Ubuntu MATE 20.04.2

[Richard Graham]

On Tue, Apr 20, 2021 at 11:54 AM Pavel Řezníček <pavel.reznicek at evangnet.cz>
wrote:

> Humm, I’ve restarted my laptop and now the .fp file gets read and the
> detection gets ignored.
>
> How come I need to restart the machine? Is there any service I could
> restart instead?
>
A restart shouldn't be necessary.  Is that behavior repeatable?  Are you
sure you're using `clamscan` and not `clamdscan`?

I don't think clamscan uses any service, although clamdscan does. When
observing `clamscan --debug ...` or `strace clamscan ...` output, I can see
the ".fp" files being loaded each time clamscan is executed.

Maybe have a look at the details of what is actually being executed and the
details of that execution?

Good luck!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210420/db48540a/attachment.htm>