Hi Darren! Yes, I know that way with ls, but how can I check all the infected files on a dataset which is used by a file server with millions of files?! I mean there is no official way to check infections, but I have to use some customs scripts? (find, ls, grep)
bzg On Wed, Feb 9, 2011 at 11:33 PM, Darren J Moffat <[email protected]> wrote: > On 02/ 9/11 09:57 PM, Zoltan Gyula Beck wrote: >> >> I would like to ask if it's possible to check the content of >> quarantine in case of zfs uses vscand + antivirus. So is there any >> command to list all the infected files in a dataset? > > Any file which has been quarantined will have the av_quarantine bit set. > > The easiest way to see that is with /usr/bin/ls for example: > > ls -/ v foo > rw-r--r-- 1 darrenm staff 176411 Nov 4 14:56 foo > > {archive,nohidden,noreadonly,nosystem,noappendonly,nonodump,noimmutable,av_modified,noav_quarantined,nonounlink,nooffline,nosparse} > > In the above case the file has noav_quarantined if it had been one that > vscand had marked as quarantined it would say av_quarantined instead. > > There is also a compact mode see ls(1) man page. > > -rw-r--r-- 1 darrenm staff 176411 Nov 4 14:56 foo > {A-------q---} > > That is what it would look like if 'foo' was quarantined. > > -- > Darren J Moffat > -- Zoltan Gyula Beck Tel.: +36-70-328-9306 E-Mail: [email protected] _______________________________________________ zfs-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
