Hi there, On Sat, 13 Jan 2007 Wilson Kwok wrote:
> Can Clamav auto scan the Linux system directory, and then after scan > can send the results to email such as root, how can I do that ? Do you have a reason for doing this in this way? If it's just to check for changed system files you'd be far better off using something designed for that purpose, like 'tripwire'. You might also want to consider setting the 'immutable' attribute: chattr +i <file_or_directory> on system directories and/or contents which will not often be changed. Then you might delete (or hide, or even forge :) the 'chattr' binary, so that if something does get into your system it will have very great difficulty in changing any system files. 73, Ged. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
