[clamav-users] Funny --include-dir behaviour

[Andy Ragusa (aragusa)]

Hi,

For
>                 nice -n -20 clamscan \
> --include-dir="^/home/$SUDO_USER/.thunderbird/Marc/Mail/" \
>                 --recursive="yes" \
>                 --quiet \
>                 --infected \
>                 --alert-broken-media="no" \
>                 --database="/var/lib/clamav" \
>                 --log="/var/log/clamav/clamscan.log"
>                 #--move="/etc/clamav/virusevent.d/Mail"

what is your current directory?  Since none is specified, the current directory is chosen, so if you aren't in a parent directory of Mail, it will not be scanned.

Thanks,
Andy

________________________________
From: clamav-users <clamav-users-bounces at lists.clamav.net> on behalf of newcomer01 via clamav-users <clamav-users at lists.clamav.net>
Sent: Monday, February 13, 2023 4:51 AM
To: ClamAV User Mailinglist <clamav-users at lists.clamav.net>
Cc: newcomer01 <newcomer01 at posteo.de>
Subject: [clamav-users] Funny --include-dir behaviour

this is hilarious, why this won't work?
>                 nice -n -20 clamscan \
> --include-dir="^/home/$SUDO_USER/.thunderbird/Marc/Mail/" \
>                 --recursive="yes" \
>                 --quiet \
>                 --infected \
>                 --alert-broken-media="no" \
>                 --database="/var/lib/clamav" \
>                 --log="/var/log/clamav/clamscan.log"
>                 #--move="/etc/clamav/virusevent.d/Mail"
this should scan only the included path recursive

But when i do this:
>                 nice -n -20 clamscan \
>                 "/home/$SUDO_USER/.thunderbird/Marc/Mail" \
>                 --recursive="yes" \
>                 --quiet \
>                 --infected \
>                 --alert-broken-media="no" \
>                 --database="/var/lib/clamav" \
>                 --log="/var/log/clamav/clamscan.log"
>                 #--move="/etc/clamav/virusevent.d/Mail"
it worked well.
Can someone explain what's the reason for this?
Oh and the var SUDO_USER is the whoami

regards,
Marc

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20230213/6d120cd6/attachment.htm>