Re: quarantine directory not working dor vscan-sophos

Am Dienstag, 7. Dezember 2004 12:28 schrieb Rainer Link:
> On Tue, Dec 07, 2004 at 12:11:34PM +0100, Thomas H?nig wrote:
> > > If no config file is used, the defaults are "vir-" and "/tmp", but the
> > > log snippet shows "vxx-" and "/var/tmp", so vscan-sophos seems to read
> > > a config file. Do you have two entries of [vscan]?

Now I have found another machine with the same behaviour, but complete (but sophie) different system:
(SuSE 9.0)

eksl:/CDs # uname -a
Linux eksl 2.4.21-226-smp4G #1 SMP Tue Jun 15 10:28:32 UTC 2004 i686 i686 i386 GNU/Linux

eksl:~ # rpm -qa | grep samba
samba-client-2.2.8a-107
samba-2.2.8a-139
samba-vscan-0.3.2a-188

Sophie version   : 3.04rc2

# snippet from smb.conf:

[tmp]
   comment = temp ressource
   path = /xxx/tmp
   public = yes
   only guest = no
   force user = cosi
   writable = yes
   printable = no
   short preserve case = yes
   preserve case = yes
   default case = lower
   vfs object = /usr/lib/samba/vscan-sophos.so

# snippet from /etc/samba/vscan-sophos.conf
; where to put infected files - you really want to change this!
; it has to be on the same physical device as the share!
quarantine directory  = /tmp/viruses
; prefix for files in quarantine
quarantine prefix = vabc-


Dec  7 14:40:21 eksl smbd_vscan_sophos[15100]: ALERT - Scan result: '/tmp/eicar.com' infected with virus 'EICAR-AV-Test', client: '192.168.216.5'
Dec  7 14:40:22 eksl smbd_vscan_sophos[15100]: INFO: quarantining file '/tmp/eicar.com' to '/var/tmp/vabc-EKQYTX' was successful

it moves it to the wrong directory too.

Thomas



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/