Bernhard,
Clamd does not currently support ALLMATCH mode with the INSTREAM protocol.
The only other suggestion I can offer is to preserve those files found to
contain viruses and research them separately using ALLMATCH.
Steve
On Mon, Feb 1, 2016 at 5:27 AM, Bernhard Vogel
wrote:
> Hi,
>
> is there an option in clamd to combine INSTREAM and ALLMATCHSCAN?
>
> We scan files which have already been locked (permission: 200 or similar)
> by another process/shellscript. Clamd runs with user "clamav" priviledges.
> At the moment we stream the content of the locked files to CLAMD with the
> INSTREAM option.
>
> Since I also require to do an allmatchscan to review our malware
> signatures, I need to combine INSTREAM and ALLMATCHSCAN.
>
> How can I ALLMATCHSCAN files only accesible by root, without doing
> something like "sudo clamscan -z "
>
>
>
>
> Regards,
> Bernhard
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
