Just noticed that scanning files with clamdscan does not scan files that are not world readable.

For example the file .mhonarc.db which is only readable by owner is not scanned by clamdscan.

I had thought clamdscan was responsible for reading the files and passing them to clamd so that user 'jnp' running clamdscan would not have problems reading a file like .mhonarc.db



ls -al tmp/
total 136
drwxr-xr-x 3 jnp napolisy 5120 May 25 18:22 ./
drwxr-xr-x 13 jnp napolisy 1024 May 26 19:22 ../
-rw-r----- 1 jnp napolisy 62051 Aug 11 2003 .mhonarc.db
drwxr-xr-x 2 jnp napolisy 512 May 25 18:22 virus/



As user jnp: clamdscan tmp/
/usr/home/jnp/tmp//virus/eicar.binhex: Eicar-Test-Signature FOUND
/usr/home/jnp/tmp//virus/eicar.com: Eicar-Test-Signature FOUND
/usr/home/jnp/tmp//virus/eicar.mail: Eicar-Test-Signature FOUND
/usr/home/jnp/tmp//virus/eicar.single: Eicar-Test-Signature FOUND
/usr/home/jnp/tmp//virus/eicar.sq: Eicar-Test-Signature FOUND
/usr/home/jnp/tmp//virus/eicar.uu: Eicar-Test-Signature FOUND
/usr/home/jnp/tmp//virus/Patch.exe: Worm.Gibe.F FOUND
/usr/home/jnp/tmp//virus/pack259.exe: Worm.Gibe.F FOUND
/usr/home/jnp/tmp//virus/readnow 8.zip: Worm.Mimail.G FOUND
/usr/home/jnp/tmp//virus/readnow.doc.scr: Worm.Mimail.G FOUND
/usr/home/jnp/tmp//virus/topless.scr: Trojan.SdBot.Gen-34 FOUND
/usr/home/jnp/tmp//virus/your_website.mail: Worm.SomeFool.Gen-1 FOUND
/usr/home/jnp/tmp//.mhonarc.db: Unable to open file or directory. ERROR
/usr/home/jnp/tmp/: OK

<x-tad-bigger>--
/jørgen nørgaard
e-mail: [EMAIL PROTECTED] | Phone: +45 2627 3769
http://anneli.dk/~jnp/
|\ _,,,---,,_
/,`.-'`' -. ;-;;,_
|,4- ) )-,_. ,\ ( `'-'
'---''(_/--' `-'\_)
</x-tad-bigger>

Reply via email to