This is with clamav 0.80 I went to scan a Phishing scam email by using clamdscan. I'd forgotten to change the perms on the file to be world-readable, but clamdscan reported:
[jhaar]$ clamdscan citifraud.eml ./citifraud.eml: Access denied. ERROR ./citifraud.eml: OK So it saw the "access denied" - but then it reports "OK"? Is that intentional? If you were scripting clamdscan and were basing decisions on the output - that could catch you out. [Obviously you should be monitoring the exit status instead - but you know how people are ;-)] If you emulate the same problem with clamscan - it just reports "access denied" - no following "OK"... Keep up the good work guys - ClamAV is superb!!! -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
