Plant, Dean said:
> Dennis Peterson wrote:
>>
>> Naturally it is going to follow NFS mount points. That is what you
>> asked it to
>> do so why wouldn't it? And what you are doing is a rather nutty thing
>> to
>> attempt, as well. This is a user problem, not a software problem. The
>> solution
>> is to scan selectively as in (examples only - this message requires
>> you to think):
>
>
> Nutty I may be :-) but scanning selectively is fine for a few machines but
> what if you have fifty machines with varying configurations. This approach
> would mean an extra administrative overhead to guarantee all machines do a
> correct full scan without scanning files multiple times because they are
> NFS
> mounted. Selectively scanning would also allow area's on file systems to
> be
> missed if someone creates a new directory that is not included on the scan
> list.
>
> Having the ability to exclude directories or limit to local file systems,
> you could run a simple common script with clamscan -r / --exclude-dir's,
> that would guarantee to scan all your files across all your machines while
> missing out problem directories.

You are a prime candidate for Cfengine.

dp

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to