Hey, I don't know if clamuko should deny access to this file. If you are running Clamuko then disable it please ;-) or show us ls -al /home/justlgn/test/eicar.com
/rl Sean McGlynn wrote: > The following is what appears in the trace that I belive is relevant (it is > all that appears relevant to eicar) > > lstat64("/home/justlgn/test/eicar.com", {st_mode=S_IFREG|0644, st_size=69, > ...}) = 0 > stat64("/home/justlgn/test/eicar.com", {st_mode=S_IFREG|0644, st_size=69, > ...}) = 0 > stat64("/home/justlgn/test/eicar.com", {st_mode=S_IFREG|0644, st_size=69, > ...}) = 0 > geteuid32() = 0 > open("/home/justlgn/test/eicar.com", O_RDONLY) = -1 EPERM (Operation not > permitted) > write(3, "WARNING: Can\'t open file /home/j"..., 54) = 54 > write(2, "WARNING: Can\'t open file /home/j"..., 54) = 54 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html