Tilman, Thank you for your reply.
Everything is being done as root. Sean ----- Original Message ---- From: Tilman Schmidt <[EMAIL PROTECTED]> To: ClamAV users ML <clamav-users@lists.clamav.net> Sent: Wednesday, October 17, 2007 9:30:23 AM Subject: Re: [Clamav-users] eicar Identified But Not Moved Sean McGlynn schrieb: > For the record, I can manually move the file: > > OES-FS05:/home/justlgn/test # mv eicar.com /var/log/clam/infected/ Judging from the prompt, you are doing this as root, but beneath your (justlgn's) home directory. > OES-FS05:/home/justlgn/test # ls -al > total 2 > drwxr-xr-x 2 root root 48 Oct 17 08:55 . > drwxr-xr-x 13 justlgn users 1856 Oct 17 07:55 .. The test directory is below your home directory, but owned by root, not by you, and you don't have write/modify access to it. > OES-FS05:/home/justlgn/test # ls -al /var/log/clam/infected/ > total 4 > drwxr-xr-x 2 root root 80 Oct 17 08:55 . > drwxr-xr-x 4 root root 232 Oct 17 06:56 .. > -rw-r--r-- 1 justlgn users 69 Oct 16 10:56 eicar.com The EICAR test file itself, however, is again owned by you. What user are you running clamscan as? HTH T. -- Tilman Schmidt Abteilungsleiter Technik ------------------------------------------------------------------------ Tilman Schmidt [EMAIL PROTECTED] Phoenix Software GmbH Tel. +49 228 97199 0 Geschäftsführer: W. Grießl Fax +49 228 97199 99 Adolf-Hombitzer-Str. 12 www.phoenixsoftware.de 53227 Bonn, Germany Amtsgericht Bonn HRB 2934 ------------------------------------------------------------------------ -----Inline Attachment Follows----- _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
