Hi there,
On Wed, 30 Sep 2020, Dave Sill via clamav-users wrote:
... you could have just said that the cache is internal to each
invocation of clamscan, but that helps.
There was a bit more to it than that but I'm glad it helped.
The problem with clamdscan is that it runs into permissions since it's
not running as root.
There are ways around that, even if you don't want to run clamdscan
(and clamd) as root - which I'd entirely understand.
Consider using a central clamd server for all your scanning needs.
How would that work? Clamd only scans files on the system on which it's
running.
No, clamd can scan anything you send it from anywhere on the planet.
My own clamd server scans mail from my mail servers. That's more or
less all it does.
We've got about 3000 Linux systems that we'd like to periodically scan,
primarily to ensure that they're not being used to redistribute
Windows malware.
A good use case, perhaps quite a tall order with a single clamd server
but maybe doable if you can (a) limit what needs to be scanned and (b)
define 'periodically' in terms of days (at least) and not hours.
We'd like to scan all of the local file systems for completeness.
There are probably better uses for the energy.
Any attempt to skip "junk" will potentially skip malware, and hand
crafting scans for each system is not an option.
That seems more like a management problem to me than a technical one.
I've seen a lot of attempts to solve management problems by using
technology and it's almost always resulted in a dog's breakfast.
Skipping multiple copies of the same file won't really help because
the duplication is across systems, and because every file will be
rescanned every time clamscan is run.
That's not true of clamdscan.
We could do a full scan on the first run and then weekly scans of files
modified in the past week. That's kludgy but may be the best we can do.
And you probably won't know what's been modified in the past week unless
you install Tripwire or something like that...
--
73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
