Re: [clamav-users] Could not watch path /var/lib/docker/overlay2 error

I’m going to continue this via clamav-devel: https://lists.gt.net/clamav/devel/77346 . ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us

Re: [clamav-users] Could not watch path /var/lib/docker/overlay2 error

After more testing this seems better: --- a/clamd/onaccess_hash.c 2019-10-10 19:19:06.0 -0500 +++ b/clamd/onaccess_hash.c2019-10-10 19:14:23.0 -0500 @@ -33,6 +33,7 @@ #include #include #include +#include #include @@ -589,6 +590,22 @@ struct onas_hnode *hnod

Re: [clamav-users] Could not watch path /var/lib/docker/overlay2 error

I have a fix for this issue. It seems to root of the problem is the use of fts which doesn’t traverse across file systems. Here’s a patch against 1.101.4: --- a/clamd/onaccess_hash.c +++ b/clamd/onaccess_hash.c @@ -33,6 +33,7 @@ #include #include #include +#include #include @@ -622

Re: [clamav-users] Could not watch path /var/lib/docker/overlay2 error

I was going to try running a main clamonacc using “OnAccessMountPath /“ and a clamonacc process for each docker container or all docker containers with “OnAccessIncludetPath /var/lib/docker/overlayfs//merged” but clamd is given the container path not the real path so it can't find the file to sc

Re: [clamav-users] Could not watch path /var/lib/docker/overlay2 error

Thanks, unfortunately the workaround isn’t practical in my case. I’ll start a new thread for the 0.102.0 fanotify support issue. ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help

Re: [clamav-users] Could not watch path /var/lib/docker/overlay2 error

Your bug was already reported by me. See this bug: https://bugzilla.clamav.net/show_bug.cgi?id=12306 (and it contains a workaround too) Franky Op Woensdag, 09-10-2019 om 17:32 schreef Arthur Ramsey via clamav-users: Hello, I’m trying to implement on access scanning for docker containers using

[clamav-users] Could not watch path /var/lib/docker/overlay2 error

Hello, I’m trying to implement on access scanning for docker containers using overlayfs by running ClamAV outside of a container. I’m using Amazon Linux 2 which is currently at 0.101.4. If I set "OnAccessMountPath /“ an eicar test file downloaded and read via a container isn’t detected. If I