Hello Perez,

FWIW, I had archived the following message (below) from the ZFS mailing
list.  This may be of value to you once you get past your current hurdle.

Jerry


On 03/23/11 14:53, Perez wrote:
>> any chance this is what you are looking for?
>>
>> http://hub.opensolaris.org/bin/view/Project+vscan/
> 
> I think so, but the download link inside your link doesn't work. I
extracted the packages SUNWvcanu, SUNWvscanr and SUNWvscankr from the
Solaris Express b130 dvd following Andre's advice, but when I try to
add_drv vscan it fails as I posted before. I'm going to start over again
and see what happens.

> Thanks.

..................................................

On 9 February 2011 09:57 PM, Zoltan Gyula Beck wrote:
>    I would like to ask if it's possible to check the content of
> quarantine in case of zfs uses vscand + antivirus. So is there any
> command to list all the infected files in a dataset?

Any file which has been quarantined will have the av_quarantine bit set.

The easiest way to see that is with /usr/bin/ls  for example:

ls -/ v foo
rw-r--r--   1 darrenm  staff     176411 Nov  4 14:56 foo

{archive,nohidden,noreadonly,nosystem,noappendonly,nonodump,noimmutable,av_modified,noav_quarantined,nonounlink,nooffline,nosparse}

In the above case the file has noav_quarantined if it had been one that
vscand had marked as quarantined it would say av_quarantined instead.

There is also a compact mode see ls(1) man page.

-rw-r--r--   1 darrenm  staff     176411 Nov  4 14:56 foo
        {A-------q---}

That is what it would look like if 'foo' was quarantined.

-- 
Darren J Moffat
_______________________________________________
zfs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
_______________________________________________
distribution-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/distribution-discuss

Reply via email to