I have posted a few previous questions regarding clamscan and problems with /net on Solaris.
After some further investigation I have found that it impossible to run an efficient full scan (clamscan -r /) of a Solaris file system if /net is activated in /etc/auto_master. This is down to the fact that Sun's automounter mounts /net/localhost as / so clamscan keeps rescanning the same files over and over again, first from / then through /net/localhost, then through /net/localhost/net/hostname.....you get the idea. Using --exclude="^//net.*" helps but does not stop clamscan traversing down /net excluding every file over and over again as it only excludes files and not directories. I have found reference to other software that has the same problem http://la-samhna.de/samhain/manual/suidchk.html & http://www.lone-tar.com/index.php?p=faq&d=all&display=1126 But their way around it is to have a directory exclude that so that the software does not read any further down into that directory. My questions are, 1. Is it possible to stop clamscan traversing down /net with the current version of ClamAV? 2. If not, what are the chances of having an exclude directory switch or a switch to limit clamscan to local file system's, like the find command? 3. Are other people working around this problem some other way or am I the only one trying to do a full scan of an Solaris file system? Thanks for your help. Dean Plant _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
