- Package:
- clamav-daemon
- Source:
- clamav
- Description:
- anti-virus utility for Unix - scanner daemon
- Submitter:
- Patrick Schleizer
- Date:
- 2023-03-07 19:15:03 UTC
- Severity:
- normal
Dear maintainer, package clamav-daemon ships a file /usr/bin/clamonacc which is a background virus scaning guard / real-time protection. It's currently non-trivial to use. sudo clamonacc ERROR: Clamonacc: at least one of OnAccessExcludeUID, OnAccessExcludeUname, or OnAccessExcludeRootUID must be specified ... it is reccomended you exclude the clamd instance UID or uname to prevent infinite event scanning loops May I suggest adding an init script / systemd unit file which runs the clamonacc background scanner? Cheers, Patrick
The config file has to be touched manually to configure it properly. In the past this was part of clamd and people managed to lockup / deadlock their systems. Therefore I hesitate to add an initscript here. However I agree that even with proper configuration an initscript would be nice here since there is no need to over complicate it. Feel free to post something (by someone who is actually using it), otherwise I try to add something later on. Sebastian
Perhaps a disabled by default $initscript?
As of clamav-daemon 1.0.0+dfsg-5, a systemd unit is provided for clamonacc, so it looks like this issue has been addressed. However, the unit is enabled by default. This looks like a bug, because the service fails to start with the default configuration.
IMHO it doesn't make sense to be enabled as default even if it would start properly.
Most common use of ClamAV is to scan emails.
Regards
Racke
I use it to quell my paranoid mode to scan my debian laptop
I used ClamTK to schedule a scan every night at 23:00. I would have thought it would be no problem. I also get those messages from clamonacc. Which leaves me with 2 questions, 1. Shouldn't ClamTK auto-exclude the needed directories? 2. How long is normal for scanning a 91GB Home dir? To test if I could run the scan from Clamtk at all I started a scan at 20:30 and left it to run. I came back at 11:30 AM and it was still going. Just how long can I expect these to take? And is there a way to exclude directories? Thanks!