Strona 1 z 1

nie działa clamfs w clamav

: 21 paź 2014, 19:15
autor: jack6699
Witam,
Kiedyś używałem Comodo jako Antivirusa i spokojnie działał w tle. Chciałem spróbować czegoś lżejszego jak Clamav z clamfs ale skanowanie wtle nie działa ;( Już chyba wszystko próbowałem
clamav.log

Kod: Zaznacz cały

Tue Oct 21 17:47:46 2014 -> +++ Started at Tue Oct 21 17:47:46 2014
Tue Oct 21 17:47:46 2014 -> clamd daemon 0.98.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Tue Oct 21 17:47:46 2014 -> Log file size limited to 4294967295 bytes.
Tue Oct 21 17:47:46 2014 -> Reading databases from /var/lib/clamav
Tue Oct 21 17:47:46 2014 -> Bytecode: Security mode set to "Paranoid".
Tue Oct 21 17:48:21 2014 -> Loaded 3643618 signatures.
Tue Oct 21 17:48:27 2014 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Tue Oct 21 17:48:27 2014 -> LOCAL: Setting connection queue length to 15
Tue Oct 21 17:48:27 2014 -> Limits: Global size limit set to 104857600 bytes.
Tue Oct 21 17:48:27 2014 -> Limits: File size limit set to 26214400 bytes.
Tue Oct 21 17:48:27 2014 -> Limits: Recursion level limit set to 16.
Tue Oct 21 17:48:27 2014 -> Limits: Files limit set to 10000.
Tue Oct 21 17:48:27 2014 -> Limits: MaxEmbeddedPE limit set to 10485760 bytes.
Tue Oct 21 17:48:27 2014 -> Limits: MaxHTMLNormalize limit set to 10485760 bytes.
Tue Oct 21 17:48:27 2014 -> Limits: MaxHTMLNoTags limit set to 2097152 bytes.
Tue Oct 21 17:48:27 2014 -> Limits: MaxScriptNormalize limit set to 5242880 bytes.
Tue Oct 21 17:48:27 2014 -> Limits: MaxZipTypeRcg limit set to 1048576 bytes.
Tue Oct 21 17:48:27 2014 -> Archive support enabled.
Tue Oct 21 17:48:27 2014 -> Algorithmic detection enabled.
Tue Oct 21 17:48:27 2014 -> Portable Executable support enabled.
Tue Oct 21 17:48:27 2014 -> ELF support enabled.
Tue Oct 21 17:48:27 2014 -> Mail files support enabled.
Tue Oct 21 17:48:27 2014 -> OLE2 support enabled.
Tue Oct 21 17:48:27 2014 -> PDF support enabled.
Tue Oct 21 17:48:27 2014 -> SWF support enabled.
Tue Oct 21 17:48:27 2014 -> HTML support enabled.
Tue Oct 21 17:48:27 2014 -> Self checking every 3600 seconds.
Tue Oct 21 17:48:27 2014 -> ERROR: ScanOnAccess: fanotify_init failed: Operation not permitted
Tue Oct 21 17:48:27 2014 -> ScanOnAccess: clamd must be started by root
Tue Oct 21 18:48:27 2014 -> No stats for Database check - forcing reload
Tue Oct 21 18:48:27 2014 -> Restarting on-access scan
Tue Oct 21 18:48:27 2014 -> Reading databases from /var/lib/clamav
Tue Oct 21 18:48:57 2014 -> Database correctly reloaded (3643618 signatures)
Tue Oct 21 18:48:57 2014 -> ERROR: ScanOnAccess: fanotify_init failed: Operation not permitted
Tue Oct 21 18:48:57 2014 -> ScanOnAccess: clamd must be started by root
Tue Oct 21 18:51:57 2014 -> Restarting on-access scan
Tue Oct 21 18:51:58 2014 -> Reading databases from /var/lib/clamav
Tue Oct 21 18:52:23 2014 -> Database correctly reloaded (4250908 signatures)
Tue Oct 21 18:52:23 2014 -> ERROR: ScanOnAccess: fanotify_init failed: Operation not permitted
Tue Oct 21 18:52:23 2014 -> ScanOnAccess: clamd must be started by root
clamd.conf

Kod: Zaznacz cały

#Automatically Generated by clamav-base postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-base
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket true
LocalSocketGroup clamav
LocalSocketMode 666
# TemporaryDirectory is not set to its default /tmp here to make overriding
# the default with environment variables TMPDIR/TMP/TEMP possible
User clamav
AllowSupplementaryGroups true
ScanMail true
ScanArchive true
ArchiveBlockEncrypted false
MaxDirectoryRecursion 15
FollowDirectorySymlinks false
FollowFileSymlinks true
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogSyslog false
LogRotate true
LogFacility LOG_LOCAL6
LogClean false
LogVerbose false
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
Foreground false
Debug false
ScanPE true
MaxEmbeddedPE 10M
ScanOLE2 true
ScanHTML true
MaxHTMLNormalize 10M
MaxHTMLNoTags 2M
MaxScriptNormalize 5M
MaxZipTypeRcg 1M
ScanSWF true
DetectBrokenExecutables false
ExitOnOOM false
LeaveTemporaryFiles false
AlgorithmicDetection true
ScanELF true
IdleTimeout 30
PhishingSignatures true
PhishingScanURLs true
PhishingAlwaysBlockSSLMismatch false
PhishingAlwaysBlockCloak false
DetectPUA true
ScanPartialMessages false
HeuristicScanPrecedence false
StructuredDataDetection false
CommandReadTimeout 5
SendBufTimeout 200
MaxQueue 100
ExtendedDetectionInfo true
OLE2BlockMacros false
ScanOnAccess true
AllowAllMatchScan true
ForceToDisk false
DisableCertCheck false
StreamMaxLength 25M
LogFile /var/log/clamav/clamav.log
LogTime true
LogFileUnlock false
LogFileMaxSize 0
Bytecode true
BytecodeSecurity Paranoid
BytecodeTimeout 60000
OfficialDatabaseOnly false
CrossFilesystems true
OnAccessMaxFileSize 0
Bardzo proszę o pomoc :)

Re: nie działa clamfs w clamav

: 21 paź 2014, 20:48
autor: xwizard
Tu masz wyjaśnienie:

Kod: Zaznacz cały

Tue Oct 21 18:52:23 2014 -> ScanOnAccess: clamd must be started by root
To jest jakiś serwer poczty czy FTP z publicznym dostępem?

Re: nie działa clamfs w clamav

: 21 paź 2014, 21:49
autor: jack6699
to nie serwer, to laptop chciałbym mieć pewność że niezaraże czy przez email czy pendrive znajomych na windowsach. Lubie mieć pewność że zadne robactwo mi nie łazi po laptopie

Re: nie działa clamfs w clamav

: 22 paź 2014, 07:46
autor: xwizard
Jeśli nie używasz wine, to prawdopodobieństwo jest małe. Chyba, że ktoś da ci zainfekowany plik a ty potem przekażesz go dalej "ręcznie". Clam twierdzi, że musi być uruchomiony jako root, więc tak spróbuj.

Re: nie działa clamfs w clamav

: 22 paź 2014, 08:28
autor: jack6699
Mi też chodzi że można coś złapać przez flash lub inne.
mógłbym prosić o pomoc , jak to zrobić żeby właczał się automatycznie w root





ps. już rozwiązałem problem, clamfs działa poprawnie :)