Re: [clamav-users] [ext] Scanning memory mapped files

2024-12-05 Thread Andrew C Aitchison via clamav-users
On Thu, 5 Dec 2024, neel roy via clamav-users wrote: Hello Ralf, I hope I can ask follow up question. You wrote: > I doesn't (from the clamonacc man page): > The clamonacc daemon registers for file access notifications from the > Linux kernel and in response, submits scans to the clamd sca

Re: [clamav-users] [ext] Scanning memory mapped files

2024-12-05 Thread neel roy via clamav-users
Hello Ralf, I hope I can ask follow up question. You wrote: > I doesn't (from the clamonacc man page): > The clamonacc daemon registers f

Re: [clamav-users] [ext] Scanning memory mapped files

Hello Ralf, Thanks. I hope I can ask follow up questions. You wrote: > I doesn't (from the clamonacc man page): > The clamonacc daemon registers for file access notifications from the > Linux kernel and in response, submits scans to the clamd scanning > daemon for a verdict. On-Access requires a

Re: [clamav-users] [ext] Re: Scanning memory mapped files

> I am not using clamonacc. I run my own program that uses fanotify, just like > clamonacc does, and gets list of files that are modifed\added. > I send that list to clamscan or clamdscan. A bit like incrond (which uses inotify() ) > The problem is limitation of fanotify which is that "The fano

Re: [clamav-users] Scanning memory mapped files

Hello, I think I could not explain correctly. I am not using clamonacc. I run my own program that uses fanotify, just like clamonacc does, and gets list of files that are modifed\added. I send that list to clamscan or clamdscan. The problem is limitation of fanotify which is that " The fanotif