Exclude mounted network filesystems from ClamAV scans

[Tony Dietrich]

On Wednesday 05 Jan 2005 20:31, Matt Morgan wrote:
> We have a few linux desktops going in for the first time, apart from
> IT people. We're running weekly scans with ClamAV on them, and we're
> having difficulty figuring out how to exclude *only* the mounted
> network drives from the scan. That is, we want to scan everything
> locally, recursively from /, while not scanning any mounted network
> volumes.
>
> We can figure out how to exclude files/directories based on their
> names; the problem is that we're using pam_mount to mount each user's
> network shares dynamically upon logon, so we don't know what shares
> may or may not be mounted at any given time and thus can't specify
> them ahead of time. Rather, we need something like find's "-xdev"
> option, that tells find not to descend directories on other
> filesystems. Is there such a thing in ClamAV? Or is there some other
> way to accomplish the same thing?
>
> Thanks,
> Matt

Would it be too hard to mount the network shares in an otherwise empty 
directory, with symlinks from the user's directories, and then simply exclude 
the mount root directory?

A script run at logon could dynamically create the symlinks each time.

-- 
Tony Dietrich
-------------
"I've got some amyls.  We could either party later or, like, start his heart."
-- "Cheech and Chong's Next Movie"