Hi there,
On Thu, 26 Sep 2019, CROFT Ian wrote:
But when I put an EICAR test txt file in /var/log/test.txt it is getting picked
up by the OnAccess scanner.
I have tried ^/var/log/ and ^/var/log/* - same issue the test.txt is still
picked up by the OnAccess scanner when it should in my mind be being ignored.
Any ideas ?
You really do need to get used to reading the 'man' pages.
In this case the man page for clamd.conf states
OnAccessExcludePath STRING
which means that the argument is a STRING, not a REGEX.
You must not put things like '^' and '*' in a STRING argument
because a STRING is taken literally. You are excluding names
which do not exist on your system.
--
73,
Ged.
_______________________________________________
clamav-users mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml