On Tue, 6 Jul 2010 15:04:51 -0400 Russ Tyndall <[email protected]> wrote:
> > On Jul 6, 2010, at 1:46 PM, Noel Jones wrote: > > >> What is a suitable command I could use to test that this is > >> firing? I've tried a few things with ECHO but nothing shows up. > >> > > > > echo won't work. The event script is run by the clamd daemon, > > which isn't attached to a terminal. > > > >> Maybe some kind've of command to drop some data into a text file > >> or something like that? > > > > Yes, that should work. A typical use of the event script would be > > to trigger an email message to the admin. > > Interesting, I made my VirusEvent line look like this in clamd.conf: > > VirusEvent /bin/cp /Library/mytestfile.txt /Library/mytestfile2.txt Does the 'clamav' user have the right to create files in /Library? Note that even if you run clamd as root, a 'User clamav' directive in clamd.conf it will drop privileges. Try copying a file to /tmp, or even simpler just 'touch /tmp/foo'. Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
