> >>>Jens Strohschnitter wrote:
> >>>ClamAV works fine in our environment, but our old scanner (sweep) has a
> >>>parameter
> >>>with them I can set permissions on the file after identified as virus to
> >>>root.root/400.
> >>>For clamav I found only the parameter --move.
> >>>Is there a chance to set permissions to root.root/400 and not to move the
> >>>file ?
> >>>
> >>>
> >>"Richard Collyer" <[EMAIL PROTECTED]> wrote:
> >>
> >>AFAIK ClamAV moves viruses into a folder "quarantine". Could you not then
> >>just run a cron every minute or so to change the perms to root:root and
> >>400? Or as I do delete the files every seven days.
> >>
> >thats a solution. Sophos-Sweep changes permission on virusfile on same folder
> >were the file is stored.
> >So if I need to move file back quarantined by clamav to --move-folder, I
> >don't
> >know where file was stored before clamav moved file.
> >But if there is no way to change permission on file without moving to
> >quarantine,
> >it is no problem for us. I can look at the log, where it was stored before
> >its quarantine.
> >
> >
> >
> >
>Rob Munsch <[EMAIL PROTECTED]> wrote:
> I haven't tried this yet myself, but mayhap you could leave --move off,
> and define a permission-changing script in virusevent.d? And are these
> activation instructions debian-specific or universal - i haven't found
> much explaining this vs. the VirusEvent directive in the clamd.conf
>
> "Note also that the clamd package contains an empty directory
> /etc/clamav/virusevent.d/
> Admins and other packagers are encouraged to use this directory to store
> scripts
> that should be executed after a virus is detected. To enable the feature,
> you will have to add:
>
> VirusEvent /bin/run-parts --lsbsysinit /etc/clamav/virusevent.d/
>
> to /etc/clamav/clamd.conf"
>
> [...]
> So perhaps a
>
> VirusEvent "/bin/chown root:root %f;chmod 0400 %f;/echo-or-log-or-something
> %v found in %f!"
>
hi
sounds great - so I will try it the next days -- seams to take a while to make
it work ;-)
--
Regards,
Jens Strohschnitter
-------------------------------------
*!!!LINUX LINUX LINUX LINUX LINUX!!!*
* http://www.jens-strohschnitter.de *
-------------------------------------
Set the controls for
the heart of the sun
-------------------------------------
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
