Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-27 Thread Micah Snyder (micasnyd) via clamav-users
Ged, all, Sorry about that. We have to make a conscious decision to remove the automatic "Security group" marker from Bugzilla tickets, and while we try to make a habit to do so - we forgot on this one. https://bugzilla.clamav.net/show_bug.cgi?id=12306 should now be viewable. -Micah On 9/2

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-27 Thread Franky Van Liedekerke via clamav-users
Op Donderdag, 26-09-2019 om 20:14 schreef Franky Van Liedekerke: > Op Donderdag, 26-09-2019 om 19:17 schreef G.W. Haywood via clamav-users: > > Hello again, > > > > On Thu, 26 Sep 2019, CROFT Ian via clamav-users wrote: > > > > > ... making sure they are all strings looks better now in most cases

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread Franky Van Liedekerke via clamav-users
Op Donderdag, 26-09-2019 om 19:17 schreef G.W. Haywood via clamav-users: > Hello again, > > On Thu, 26 Sep 2019, CROFT Ian via clamav-users wrote: > > > ... making sure they are all strings looks better now in most cases. > > > > So I now have these :- > > > > OnAccessIncludePath /var/log > > ( O

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread G.W. Haywood via clamav-users
Hello again, On Thu, 26 Sep 2019, CROFT Ian via clamav-users wrote: ... making sure they are all strings looks better now in most cases. So I now have these :- OnAccessIncludePath /var/log ( Only added to include to get around the bug previously mentioned ) OnAccessIncludePath /var OnAccess

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread Paul Kosinski via clamav-users
It would be better if these were consistent. Also, it seems to me that a regex is overkill, while a literal string is rather limiting. Might it not be better simply to use the standard file path pattern with wildcard characters ('*'), like (e.g.) rsync uses? On Thu, 26 Sep 2019 11:30:01 +0200 Fr

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread Franky Van Liedekerke via clamav-users
d via clamav-users Sent: 26 September 2019 10:22 To: ClamAV users ML Cc: G.W. Haywood Subject: Re: [clamav-users] OnAccessExcludePath being ignored. Hi there, On Thu, 26 Sep 2019, CROFT Ian wrote: > But when I put an EICAR test txt file in /var/log/test.txt it is getting picked up by the O

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread CROFT Ian
ywood via clamav-users Sent: 26 September 2019 10:22 To: ClamAV users ML Cc: G.W. Haywood Subject: Re: [clamav-users] OnAccessExcludePath being ignored. Hi there, On Thu, 26 Sep 2019, CROFT Ian wrote: > But when I put an EICAR test txt file in /var/log/test.txt it is getting > picke

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread Franky Van Liedekerke via clamav-users
Op Donderdag, 26-09-2019 om 11:22 schreef G.W. Haywood via clamav-users: > Hi there, > > On Thu, 26 Sep 2019, CROFT Ian wrote: > > > But when I put an EICAR test txt file in /var/log/test.txt it is getting > > picked up by the OnAccess scanner. > > > > I have tried ^/var/log/ and ^/var/log/* - s

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 26 Sep 2019, CROFT Ian wrote: But when I put an EICAR test txt file in /var/log/test.txt it is getting picked up by the OnAccess scanner. I have tried ^/var/log/ and ^/var/log/* - same issue the test.txt is still picked up by the OnAccess scanner when it should in my mind b

[clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread CROFT Ian
We have separate filesystems on our servers under /var :- /var /var/log /var/log/audit And following this advice recently :- While it is not recommended to scan everything under /var (or /var at all), the reason it fails is because you have /var submounts (/var/log, /var/tmp). This is currently