Re: Tumbleweed, Clamd is spamming my journal with thousand of line of "path check failures" making it de facto unreadable

28 Oct 2024

      Hello,

In the Message; 

  Subject    : Re: Tumbleweed, Clamd is spamming my journal with thousand of line of "path check failures" making it de facto unreadable
  Message-ID : <6932287.gsLiYJJu4s@silversurfer>
  Date & Time: Sun, 27 Oct 2024 20:59:24 +0100

Stakanov via openSUSE Users <users@lists.opensuse.org> has written:

[...]
...
Thank you for this. I am saving this to a howto, until I can see if an update 
will erase my direct changes. I did open a bugreport and maybe they will look 
into it (why it happens in the first place). For me this is a bug of some sort 
that manifests with selected users and it should be taken into account to 
avoid to other users the same problem. That it happens also in other 
circumstances and settings is known.
...
So I will see what the solution bugowner will come up with (if any).
This should be considered a spec, not a bug.
Also, be aware that the official version of openSUSE is 1.3.1.

Anyway, the clamonaccc issue is a difficult one, and several
approaches have been suggested. Upstream has adopted the Ubuntu
maintainer's proposal, which differs from the openSUSE one.

This Ubuntu maintainer has given good advice, and this also applies to
1.4.1 users.

      --- For those planning to use On-Access Scanning, my advice is ---

	Don’t try to use it to scan the entire file system and don’t
	use OnAccessPrevention (unless latency is not an issue).

	Use it on specific directories that are likely sources of
	malware based on your systems use-case (for example file
	server directories, home directories, or website writable
	directories).

	Hopefully, this article was helpful and insightful for those
	who are looking to setup On-Access Scanning understand the
	caveats and steps necessary to get it running under Ubuntu
	18.04 with ClamAV 0.102.3.

  Cf. https://aaronbrighton.medium.com/installation-configuration-of-clamav-antivi...

As you may know, the load on the system when using clamonacc is
extraordinary, so it is essential that your client understands this.

Best Regards.

---
┏━━┓彡     Masaru Nomiya                   mail-to: nomiya @ lake.dti.ne.jp
┃＼／彡
┗━━┛       "During testing, Sakana found that its system began unexpectedly
	       attempting to modify its own experiment code to extend the time
	       it had to work on a problem."

 	       -- Research AI model unexpectedly attempts to modify its own code
 	       	  to extend runtime (ars TECHNICA) --