clamAV's scan stop on /sys dir.

Bug #644097 reported by Jin Kawakami
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
clamav (Ubuntu)
Invalid
Low
Unassigned

Bug Description

Binary package hint: clamav

i was virus scanning on clamav.
$ sudo clamscan -r /

clamscan runs and scanning
and when scanning /sys Directory
clamscan warning like this
LibClamAV Warning: fmap_readpage: pread fail: asked for 4086 bytes @ offset 10, got 0

and it seems clamscan stop.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: clamav 0.96.1+dfsg-0ubuntu0.10.04.2
ProcVersionSignature: Ubuntu 2.6.32-24.43-generic-pae 2.6.32.15+drm33.5
Uname: Linux 2.6.32-24-generic-pae i686
NonfreeKernelModules: nvidia
Architecture: i386
Date: Tue Sep 21 13:56:02 2010
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release i386 (20100429)
ProcEnviron:
 LANG=ja_JP.utf8
 SHELL=/bin/bash
SourcePackage: clamav

Revision history for this message
Jin Kawakami (jink1019) wrote :
Revision history for this message
Imre Gergely (cemc) wrote :

I tried scanning /sys, and it gave me the same messages, but I don't think it's a bug per se. It's more likely because /sys is a 'virtual' directory, and it has a lot of special files, clamscan gets confused while scanning it. If you run 'top', you'll see that clamscan is indeed working hard to scan some of those file (like 99-100% CPU usage for clamscan process).

You could try excluding /sys (and possibly /dev ?) from scanning with the command-line option:

       --exclude=REGEX, --exclude-dir=REGEX
              Don't scan file/directory names matching regular expression.
              These options can be used multiple times.

See if this helps.

Revision history for this message
Mathias Gug (mathiaz) wrote :

Agreed with the option outlined in comment 2. Marking this bug as Invalid.

Changed in clamav (Ubuntu):
status: New → Invalid
importance: Undecided → Low
Revision history for this message
Jin Kawakami (jink1019) wrote :

Thanks,everyone.

Mr.Gergely
Thank you.
I tried the way that you taught and could scan with no problem.

Mr.Gug
Sorry and thanks to correct my reports…….

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.