Re: Scanning memory mapped files
neel roy via clamav-users <[email protected]>
| Newsgroups | gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <1733384211.S.10426.autosave.drafts.1733384900.15112@webmail.rediffmail.com> |
Hello, Sorry, I should have given complete information but my thought process was little slow :) Here is the question as I posted on stackoverflow (https://superuser.com/questions/1863769/clamav-and-memory-mapped-files): I am using clamav on Enterprise Linux 9. In order to optimize it's scanning I am getting list of modified files using fanotify (https://man7.org/linux/man-pages/man7/fanotify.7.html). But it states " The fanotify API does not report file accesses and modifications that may occur because of mmap(2), msync(2), and munmap(2).". Based on this I have two questions: does clamav scan memory mapped files? If it does, is there a way to ask clamav to scan just memory mapped files? Thanks in advance! Thanks! From: neel roy via clamav-users <[email protected]> Sent: Thu, 05 Dec 2024 12:24:27 To: <[email protected]> Cc: neel roy <[email protected]> Subject: [clamav-users] Scanning memory mapped files Hello, Does clamav scan memory mapped files? If yes, does it option to scan _just_ memory mapped files? Thanks in advance, -Neel. _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat