P.S. Based on the trace results I believe what you are saying about this not being about moving the file is correct. I don't think the process has gotten as far as trying to move the file.
For the record, I can manually move the file: OES-FS05:/home/justlgn/test # mv eicar.com /var/log/clam/infected/ OES-FS05:/home/justlgn/test # ls -al total 2 drwxr-xr-x 2 root root 48 Oct 17 08:55 . drwxr-xr-x 13 justlgn users 1856 Oct 17 07:55 .. OES-FS05:/home/justlgn/test # ls -al /var/log/clam/infected/ total 4 drwxr-xr-x 2 root root 80 Oct 17 08:55 . drwxr-xr-x 4 root root 232 Oct 17 06:56 .. -rw-r--r-- 1 justlgn users 69 Oct 16 10:56 eicar.com Thanks again. ----- Original Message ---- From: Török Edvin <[EMAIL PROTECTED]> To: ClamAV users ML <clamav-users@lists.clamav.net> Sent: Tuesday, October 16, 2007 3:18:43 PM Subject: Re: [Clamav-users] eicar Identified But Not Moved On 10/16/07, Sean McGlynn <[EMAIL PROTECTED]> wrote: > Just to be certain (It's not my first day with Linux, but I'm still > relatively new to it), you mean NFS as in Network File System, as in mounting > a remote file system on the Linux server, correct? If correct, then no, NFS > is not involved. Both the directory being scanned and the destination > directory for quarantine files on on the root filesystem, local to the > machine. > Try this: $ strace clamscan -r --move=/var/log/clam/infected -l /var/log/clam/dailyclamscanSPM /home/justlgn/test/eicar.com Then we'll know exactly what happened. "Can't open file" looks like a message from the scanner, if the file couldn't be moved, it should have said that it cannot move the file. --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
