Am Mon, Nov 08, 2004 at 05:32:10PM +0100 schrieb Alexander Stielau: > > Is it possible to use something like ClamukoScanOnWrite, or is there a > logical mistake by myself?
I asked by the dazuko-developers, and it is *not* possible at this time to use ON_CLOSE-Events with 2.6.X-kernels: <http://savannah.nongnu.org/support/?func=detailitem&item_id=103547> So i switched back to 2.4.27, and now i get an event ON_CLOSE by dazuko/clamuko via clamd in the syslog, when i try to cp an testfile from the source-distribution to a clamuko-scanned directory, but no action against: zwiebelfisch:/tmp# cp /usr/src/clamav-0.80/test/clam.exe /tmp/ zwiebelfisch:/tmp# ls -la /tmp/clam.exe -rw-r--r-- 1 root root 544 Nov 10 17:54 /tmp/clam.exe zwiebelfisch:/tmp# tail -1 /var/log/syslog Nov 10 17:47:22 zwiebelfisch clamd[26600]: Clamuko: /tmp/clam.exe: ClamAV-Test-File FOUND So i got only a logging action on ScanOnClose, with ScanOnOpen i get 'real' actions. I need actions (e.g. do not bind the inode to the directory structure information before the filehandle is unlocked or something like that) also for ScanOnClose. Aleks _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
