[clamav-users] How to scan a single partition

[G.W. Haywood]

Hi there,

On Mon, 26 Apr 2021, Christian wrote:

> My system is Linux/Lubuntu 20.04.2 LTS, 64 bit.

Then you have 'man' pages. :)

> I have *three* partitions: root-, home- and a third (data-)partition with 23 
> GB, 36 GB and 193 GB respectively plus 3 usb-sticks:
> ...
> What I want to do is: scan the _root-partition exclusively_, not the other 
> ones and not the sticks.
>
> What command would I need for this?
>
> Looking around on the web I found this command 
> (https://pikedom.com/clam-anti-virus-on-arch-linux/ ):
>
> /clamscan --recursive --infected --exclude-dir='^/sys|^/dev|^/proc|^/var/lib/clamav' --max-filesize=4000M --max-scansize=4000M / -l ~/clamav-scan-results/201803261436/
> 
> As the starting point is / this would scan everything, right? Which is not 
> what I want to achieve.

No it won't scan everything because it has exclusions, but you're much
better off looking at the ClamAV manual than scouring the Internet for
random shell commands which may or may not have been written by people
who know what they are doing; may or may not do what you want; and may
or may not even be safe.

In this case you're looking for the "cross filesystems" features, but
unfortunately they're named differently for the different ClamAV tools.

As you're using clamscan, the command-line option '--cross-fs=no' will
limit recursive scanning to the filesystem containing the starting
point of the scan.

If you were to use clamd, the configuration option 'CrossFilesystems'
can be set to 'no' (the default is 'yes') for the same purpose.

You may want to look at the symlink options too.

-- 

73,
Ged.