Help with clam on access scanning
Jim
azanorak at gmail.com
Mon Dec 21 21:40:20 MST 2020
I followed the instructions here for setting up on access scanning
https://www.clamav.net/documents/on-access-scanning
The only instruction I couldn't follow was this:
Set the `ScanOnAccess` option to `yes` There was no such option in
/etc/clamav/clamd.conf I also saw no option to set for scan on access
any particular file type. I tried sudo clamonacc, tested the test
files and it didn't stop me accessing them. I found out that starting
clamonacc with the -F option can be helpful when something isn't
working. I tried delboy at ladmo:~$ sudo clamonacc and a minute or so
later, here's what I got:
ClamInotif: watching '/home/delboy' (and all sub-directories)
ERROR: ClamInotif: could not watch path '/home/delboy', No space left on
device
ClamScanQueue: stopped
ClamInotif: stopped
Clamonacc: stopped
delboy at ladmo:~$
df -h shows 1.1T available on the disk mounted as my home directory.
Does anyone have any idea what's going on?
thanks
On 12/17/20 8:45 PM, Eric Oyen via PLUG-discuss wrote:
> You may have to check and see if the .txt extension is one of the ones that can be set for scan on access. Since I haven’t used the Clam in a very long time, I am not sure if any of the old advanced options are still in there.
>
> -Eric
> From the Central Offices of the Technomage Guild, Infrastructure security division
>
>
>> On Dec 10, 2020, at 6:42 PM, Jim via PLUG-discuss <plug-discuss at lists.phxlinux.org> wrote:
>>
>> I have Kubuntu 20.04 installed with Clamav.
>>
>> clamscan -V tells me
>> ClamAV 0.102.4/26014/Thu Dec 10 07:21:42 2020
>>
>> cat /proc/version says
>> Linux version 5.4.0-56-generic
>>
>> I tried to get the on access scanning to work. clamonacc is in /usr/bin. I used the directions here:
>> https://www.clamav.net/documents/on-access-scanning
>>
>> The problem is that it doesn't do anything when I access eicar.com.txt which I downloaded from
>> https://www.eicar.org/?page_id=3950
>>
>> Have I missed something or is there something else going on?
>>
>>
>> thanks
>>
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
>> To subscribe, unsubscribe, or to change your mail settings:
>> https://lists.phxlinux.org/mailman/listinfo/plug-discuss
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> https://lists.phxlinux.org/mailman/listinfo/plug-discuss
More information about the PLUG-discuss
mailing list