clamonacc(8)

1Clam On-Access Scanner(8)       Clam AntiVirus       Clam On-Access Scanner(8)
2
3
4

NAME

6       clamonacc - an anti-virus on-access scanning daemon and clamd client
7

SYNOPSIS

9       clamonacc [options]
10

DESCRIPTION

12       The  clamonacc  daemon registers for file access notifications from the
13       Linux kernel and in response, submits scans to the clamd scanning  dae‐
14       mon  for  a  verdict.  On-Access is only available on Linux systems. On
15       Linux, On-Access requires a kernel version >= 3.8. This is  because  it
16       leverages a kernel api called fanotify to block processes from attempt‐
17       ing to access malicious files. This prevention occurs in  kernel-space,
18       and thus offers stronger protection than a purely user-space solution.
19

OPTIONS

21       -h, --help
22              Output help information and exit.
23
24       -V, --version
25              Print the version number and exit.
26
27       -v, --verbose
28              Be verbose.
29
30       -l FILE, --log=FILE
31              Save the scan report to FILE.
32
33       -F, --foreground
34              Run in foreground; do not daemonize.
35
36       -W FILE, --watch-list=FILE
37              Watch directories from FILE.
38
39       -e FILE, --exclude-list=FILE
40              Exclude directories from FILE.
41
42       -p A[:I], --ping A[:I]
43              Ping clamd up to [A] times at optional interval [I] until it re‐
44              sponds.
45
46       -w, --wait
47              Wait up to 30 seconds for clamd to start. Optionally use  along‐
48              side ping to set attempts [A] and interval [I] to check clamd.
49
50       --remove
51              Remove infected files. Be careful.
52
53       --move=DIRECTORY
54              Move infected files into DIRECTORY.
55
56       --copy=DIRECTORY
57              Copy infected files into DIRECTORY.
58
59       -c FILE, --config-file=FILE
60              Read configuration from FILE.
61
62       --allmatch
63              Continue scanning within file after finding a match.
64
65       --fdpass
66              Pass the file descriptor permissions to clamd. This is useful if
67              clamd is running as a  different  user  as  it  is  faster  than
68              streaming  the  file  to  clamd.  Only available if connected to
69              clamd via local(unix) socket.
70
71       --stream
72              Forces file streaming to clamd. This is generally not needed  as
73              clamdscan  detects  automatically if streaming is required. This
74              option only exists for debugging and testing  purposes,  in  all
75              other cases --fdpass is preferred.
76

SIGNALS

78       ClamOnAcc recognizes the following signals:
79
80       SIGHUP Reopen the logfile.
81
82       SIGUSR2
83              Reload the signature databases.
84
85       SIGTERM
86              Perform a clean exit.
87

FILES

89       /etc/clamd.conf
90

CREDITS

92       Please check the full documentation for credits.
93

AUTHOR

95       Tomasz Kojm <tkojm@clamav.net>
96