Hello, thank you for the response. I tried to reinstall clamav after I saw that there was a new update, but when I install it, it installs version 0.102.4.
Could you give me an example of an ‘ExcludePath’ that could do the following:
Exclude a file in /path/to/file
Exclude a file in /different/path/to/file
Exclude all files with a .sys extension, regardless of path
P.S. I am mounting many file systems on a system, and scanning all the files in them.
Hi there,
On Wed, 27 Jan 2021, Michael Kyriacou via clamav-users wrote:
> ... I am using clamav version 0.102.4, on Ubuntu 20.04.
You really should be upgrading to the latest version.
> I want clamd to exclude all pagefile.sys files it finds when scanning
> mounted filesystems. Currently, it scans them. Is there anyway to do this?
> I know on the source version you can add “Exclude Path”, but I’m not sure
> if it works on the non-source version.
Unless the package maintainer has done something staggeringly foolish,
it will work the same whether you build from source or use a package.
> Additionally, it may get more complicated as the path to the pagefile.sys
> is not the same for each file system. Is there a way to exclude a specific
> file that matches a .sys extension?
The 'ExcludePath' (not 'Exclude Path') directive takes as its argument
a regular expression. You just need to fabricate a regular expression
which matches all the files you don't want to scan. You can have more
than one 'ExcludePath' directive in the configuration file if you wish
and that might help if the regex gets unwieldy.
Feel free to experiment while looking at the verbose logs, no harm will
be done.
You could instead of course move your page files to some other place,
which won't be scanned.
--
73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml