Bernhard, Clamd does not currently support ALLMATCH mode with the INSTREAM protocol. The only other suggestion I can offer is to preserve those files found to contain viruses and research them separately using ALLMATCH.
Steve On Mon, Feb 1, 2016 at 5:27 AM, Bernhard Vogel <[email protected]> wrote: > Hi, > > is there an option in clamd to combine INSTREAM and ALLMATCHSCAN? > > We scan files which have already been locked (permission: 200 or similar) > by another process/shellscript. Clamd runs with user "clamav" priviledges. > At the moment we stream the content of the locked files to CLAMD with the > INSTREAM option. > > Since I also require to do an allmatchscan to review our malware > signatures, I need to combine INSTREAM and ALLMATCHSCAN. > > How can I ALLMATCHSCAN files only accesible by root, without doing > something like "sudo clamscan -z ...." > > > > > Regards, > Bernhard > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
