-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello

This is probably a feature rather than a defect.

The scenario: I have clamuko running against the /home directory, checking 
opens and executions. It means that dazuko prevents me from opening or 
executing an infected file - excellent. But I also like to do some ad hoc 
scans, of e.g. new downloads, email arriving in ~/Mail, etc. When a file I 
scan like this is virus-infected, I only get to find out because clamav 
reports an error trying to open the infected file, instead of reporting the 
infection found. In other words, clamav is itself prevented from opening the 
file.

I think it would be better for clamav to be able to scan all files, even if 
they are protected by clamuko. I do not know how all of this works but I can 
imagine all kinds of reasons why it may be difficult to do. But something to 
think about for the future?

In the meantime, I have a quarantine directory which is excluded from clamuko 
and into which I can move suspect files for further analysis.

Steve

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qriS94mqX5AIfgARAiazAJ44Z58hRHdE1C80VmWIQiGy+BwoYwCfb8rb
RJerBJy6eNY2/P88OiADVm0=
=dLEh
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to