Help with clam on access scanning

Jim azanorak at gmail.com
Mon Dec 21 21:40:20 MST 2020


I followed the instructions here for setting up on access scanning

https://www.clamav.net/documents/on-access-scanning

The only instruction I couldn't follow was this:
Set the `ScanOnAccess` option to `yes`  There was no such option in 
/etc/clamav/clamd.conf  I also saw no option to set for scan on access 
any particular file type.  I tried sudo clamonacc, tested the   test 
files and it didn't stop me accessing them.  I found out that starting 
clamonacc with the -F option can be helpful when something isn't 
working.  I tried delboy at ladmo:~$ sudo clamonacc and a minute or so 
later, here's what I got:

ClamInotif: watching '/home/delboy' (and all sub-directories)
ERROR: ClamInotif: could not watch path '/home/delboy', No space left on 
device
ClamScanQueue: stopped
ClamInotif: stopped
Clamonacc: stopped
delboy at ladmo:~$

df -h shows 1.1T available on the disk mounted as my home directory.

Does anyone have any idea what's going on?

thanks

On 12/17/20 8:45 PM, Eric Oyen via PLUG-discuss wrote:
> You may have to check and see if the .txt extension is one of the ones that can be set for scan on access. Since I haven’t used the Clam in a very long time, I am not sure if any of the old advanced options are still in there.
>
> -Eric
>  From the Central Offices of the Technomage Guild, Infrastructure security division
>
>
>> On Dec 10, 2020, at 6:42 PM, Jim via PLUG-discuss <plug-discuss at lists.phxlinux.org> wrote:
>>
>> I have Kubuntu 20.04 installed with Clamav.
>>
>> clamscan -V tells me
>> ClamAV 0.102.4/26014/Thu Dec 10 07:21:42 2020
>>
>> cat /proc/version says
>> Linux version 5.4.0-56-generic
>>
>> I tried to get the on access scanning to work. clamonacc is in /usr/bin.  I used the directions here:
>> https://www.clamav.net/documents/on-access-scanning
>>
>> The problem is that it doesn't do anything when I access eicar.com.txt which I downloaded from
>> https://www.eicar.org/?page_id=3950
>>
>> Have I missed something or is there something else going on?
>>
>>
>> thanks
>>
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
>> To subscribe, unsubscribe, or to change your mail settings:
>> https://lists.phxlinux.org/mailman/listinfo/plug-discuss
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> https://lists.phxlinux.org/mailman/listinfo/plug-discuss


More information about the PLUG-discuss mailing list