There are multiple github issues referencing this warning. My best guess as to the cause is one of these two:
* attempting to scan a file that is in a mounted volume where our "file descriptor to file path lookup" feature does not work * attempting to scan a file that has been deleted before the scan starts. https://github.com/Cisco-Talos/clamav/issues/1050#issuecomment-1753482041 Perhaps your situation is the mounted volume scenario? Or maybe there is something else going on. I don't know of any solution to silence the warning outside of customizing clamav source code and then building from source. Sorry. -Micah Micah Snyder (they/them) ClamAV Development Talos Cisco Systems, Inc. ________________________________ From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of Lorenzo Mirabella via clamav-users <clamav-users@lists.clamav.net> Sent: Wednesday, June 12, 2024 11:07 AM To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net> Cc: Lorenzo Mirabella <lorenzo.mirabe...@outlook.it> Subject: [clamav-users] Suppress warning logs Hello, I have configured the on-access scanning in ClamAV in this way: ``` OnAccessIncludePath /home/lmirabella/Downloads/test OnAccessPrevention yes OnAccessDisableDDD yes OnAccessExcludeRootUID yes OnAccessExcludeUID 0 OnAccessExcludeUname clamav ``` and I started clamonacc in this way: ``` sudo clamonacc --fdpass``` In the syslog logs, when I access the virus file, I see two warnings: ``` 2024-06-12T16:21:30.055088+02:00 DSY158 clamd[15706]: WARNING: Wed Jun 12 16:21:30 2024 -> File path check failure for: /home/lmirabella/Downloads/test/test-doc-see-as-virus-by-clamav.txt 2024-06-12T16:21:30.055201+02:00 DSY158 clamd[15706]: WARNING: Wed Jun 12 16:21:30 2024 -> File path check failure on: /home/lmirabella/Downloads/test/test-doc-see-as-virus-by-clamav.txt 2024-06-12T16:21:30.058928+02:00 DSY158 clamd[15706]: Wed Jun 12 16:21:30 2024 -> /home/lmirabella/Downloads/test/test-doc-see-as-virus-by-clamav.txt: Win.Test.EICAR_HDB-1(44d88612fea8a8f36de82e1278abb02f:68) FOUND ``` The virus is correctly detected but I would like to eliminate the two warnings. How can I do it? Thanks in advance.
_______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat
