Plant, Dean said: > Dennis Peterson wrote: >> >> Naturally it is going to follow NFS mount points. That is what you >> asked it to >> do so why wouldn't it? And what you are doing is a rather nutty thing >> to >> attempt, as well. This is a user problem, not a software problem. The >> solution >> is to scan selectively as in (examples only - this message requires >> you to think): > > > Nutty I may be :-) but scanning selectively is fine for a few machines but > what if you have fifty machines with varying configurations. This approach > would mean an extra administrative overhead to guarantee all machines do a > correct full scan without scanning files multiple times because they are > NFS > mounted. Selectively scanning would also allow area's on file systems to > be > missed if someone creates a new directory that is not included on the scan > list. > > Having the ability to exclude directories or limit to local file systems, > you could run a simple common script with clamscan -r / --exclude-dir's, > that would guarantee to scan all your files across all your machines while > missing out problem directories.
You are a prime candidate for Cfengine. dp _______________________________________________ http://lurker.clamav.net/list/clamav-users.html