On 02/ 9/11 09:57 PM, Zoltan Gyula Beck wrote:
I would like to ask if it's possible to check the content of
quarantine in case of zfs uses vscand + antivirus. So is there any
command to list all the infected files in a dataset?
Any file which has been quarantined will have the av_quarantine bit set.
The easiest way to see that is with /usr/bin/ls for example:
ls -/ v foo
rw-r--r-- 1 darrenm staff 176411 Nov 4 14:56 foo
{archive,nohidden,noreadonly,nosystem,noappendonly,nonodump,noimmutable,av_modified,noav_quarantined,nonounlink,nooffline,nosparse}
In the above case the file has noav_quarantined if it had been one that
vscand had marked as quarantined it would say av_quarantined instead.
There is also a compact mode see ls(1) man page.
-rw-r--r-- 1 darrenm staff 176411 Nov 4 14:56 foo
{A-------q---}
That is what it would look like if 'foo' was quarantined.
--
Darren J Moffat
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
