Comments on: Automated ClamAV Virus Scanning

By: Devon

Devon — Fri, 11 Jun 2010 19:48:06 +0000

It should run as root, so it shouldn’t need any special permissions. Just make sure the scan.log file is owned by root, and it can be world readable without too much risk.

Devon

By: Derek

Derek — Fri, 11 Jun 2010 07:00:05 +0000

I implemented the scripts for daily and weekly scans, though I have a question regarding the log file setup.

When I first tried to use the LOG option from the command line, I found that I had to create the scan.log file manually.

My question is how did you setup the log file permissions so that the cron script will write to it?

By: Devon

Devon — Fri, 04 Jun 2010 14:49:40 +0000

Good point on the -type f thing. I didn’t check that. The twice running thing is by design, but I had a cut and paste failure when I updated that script. It should run once for -mmin and once for -cmin to find both files created in the last 61 minutes, and files modified in the last 61 minutes. Fixing the script now, good eye!

By: Gerrit Kamp

Gerrit Kamp — Fri, 04 Jun 2010 13:35:21 +0000

Hi Devon,
Thanks for these great scrips! Very, very useful.

Two comments that may be helpful: when using -type f I did not pick up viruses in zip files but as soon as I removed -type f altogether, I did find them. Also, the hourly script above runs ‘find’ and ‘clamscan’ twice.

cheers

By: Devon

Devon — Fri, 21 May 2010 16:58:25 +0000

Very good point! Assuming you’re only having the issue with the hourly script, it’s not clam’s fault, it’s mine/linux’s:) However, I’ve just updated the hourly script in a way that should handle files with spaces no problem. Give it a test!

Thanks!

Devon

By: Andrew Kramer

Andrew Kramer — Fri, 21 May 2010 03:58:23 +0000

Although to be fair, I think that’s Clam being dumb, not you

By: Andrew Kramer

Andrew Kramer — Fri, 21 May 2010 03:55:16 +0000

Nice scripts – thanks for posting them. One problem – filenames with spaces. Example:”Time_spent on the queue-all messages.png”

Naturally, you get the following complaint:

Time_spent: No such file or directory
on: No such file or directory
the: No such file or directory
queue-all: No such file or directory
messages.png: No such file or directory

By: Devon

Devon — Tue, 18 May 2010 17:30:02 +0000

Joshua,

great catch on the semi-colon (fixed it) thanks!!

Glad you like the scripts!

Devon

By: Joshua Glemza

Joshua Glemza — Tue, 18 May 2010 17:17:31 +0000

Thanks for writing these scripts. Also, there’s an erroneous semicolon on line 19 of the hourly script.