<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Thank you.<br class=""><div><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">The binary daemondo is part of MacPorts:</div></div></blockquote>So the notes indicated - or at any rate that “a” daemondo is part of MacPorts.<br class=""><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div><div class="">$ which daemondo</div><div class="">/opt/local/bin/daemondo</div></div></div></blockquote>I found that but didn’t know how to tell if it was the right one. It isn’t in a MacPorts directory so I didn’t see a way to know this is the MacPorts daemondo and not some other daemondo since the name looks fairly generic. Thanks for confirming that I did grant access to the correct file.<br class=""><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div><div class="">To allow this process full disk access hit ‘+’ under System Preferences> Security & Privacy> Privacy> Full Disk Access,</div></div></div></blockquote>Did that.<br class=""><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div><div class="">Then in the Finder window hit Command-Shift-. to show the hidden directories, then navigate to /opt/local/bin/daemondo.</div></div></div></blockquote>Did that.<br class=""><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div><div class="">All clamav-server logs are in /opt/local/var/log/clamav, or ~/Library/Logs/ClamavScanIt for user-invoked ClamavScanIt.sh calls. Look for ClamavScanOnAccess.log and ClamavScanSchedule.log.</div></div></div></blockquote>Wasn’t seeing anything there when I wrote, but now there are things there, so I guess it is working. Thanks for confiming that is all I should be seeing.<br class=""><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div><div class="">Except for the logs, clamav-server scans happen silently in the background. Quarantined files are placed in /opt/Quarantine or ${CLAMAV_SERVER_QUARANTINE} according to rules in the scripts:</div><div class=""><ul class="MailOutline"><li class="">/opt/local/etc/LaunchDaemons/org.macports.ClamavScanOnAccess/ClamavScanOnAccess.wrapper</li><li class="">/opt/local/etc/LaunchDaemons/org.macports.ClamavScanSchedule/ClamavScanSchedule.wrapper</li><li class="">/opt/local/bin/ClamavScanIt.sh</li></ul><div class=""><br class=""></div></div><div class="">There’s several other shell variable in these scripts that provide user control of control scanning behavior.</div><div class=""><br class=""></div><div class="">If you follow the instructions for the Finder.app Contextual Menu for ClamavScanIt.sh, then right-click on a file and run ClamavScanIt, you’ll see the little Automator gear running in the Menu Bar, then a notification of the result.</div></div></div></blockquote>That I was seeing.<br class=""><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div><div class="">An undocumented feature to set environment variables at boot time is to create and load a plist like the following:</div><div class=""><br class=""></div><div class="">/Library/LaunchDaemons/private.myserver.launchctl-setenv.plist</div><div class=""><blockquote type="cite" class=""><div class=""><?xml version="1.0" encoding="UTF-8"?></div><div class=""><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "<a href="http://www.apple.com/DTDs/PropertyList-1.0.dtd" class="">http://www.apple.com/DTDs/PropertyList-1.0.dtd</a>"></div><div class=""><plist version="1.0"></div><div class=""><dict></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><key>Label</key></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><string>private.myserver.launchctl-setenv</string></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><key>ProgramArguments</key></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><array></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><string>/bin/bash</string></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><string>-c</string></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><string>/bin/launchctl setenv CLAMAV_SERVER_QUARANTINE /path/to/my/quarantine ; /bin/launchctl setenv CLAMAV_SERVER_SCAN_SCHEDULE_TARGETS '("/" "/Volumes/MyDisk”)'</string></div></blockquote><blockquote type="cite" class=""><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span></array></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><key>RunAtLoad</key></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><true/></div><div class=""></dict></div><div class=""></plist></div></blockquote></div><div class=""><div class=""><br class=""></div></div><div class=""><br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On Dec 14, 2020, at 11:35 AM, Lenore Horner <<a href="mailto:LenoreHorner@sbcglobal.net" class="">LenoreHorner@sbcglobal.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I’m not understanding one part of the notes for clamav-server. They say<div class="">“<span style="font-family: Menlo; font-size: 11px;" class="">On macOS 10.14+ On-Schedule and On-Access scans require enabling</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Full Disk Access for the MacPorts process "daemondo" in:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; min-height: 13px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> </span><br class="webkit-block-placeholder"></div><div class=""><span style="font-family: Menlo; font-size: 11px;" class=""> </span><span style="font-family: Menlo; font-size: 11px;" class="">System Preferences> Security & Privacy> Full Disk Access</span>”.</div><div class="">I’ve looked through the results of <font face="Times" class="">port contents clamav</font> and <font face="Times" class="">port contents clamav-server</font> and don’t see any file <font face="Times" class="">deamondo</font> listed. There is a <font face="Times" class="">deamondo</font> in <font face="Times" class="">/opt/local/bin</font> but how do I know that’s the right one? It’s not labeled in any clear way as having come from MacPorts. How would I verify that automake scanning of ~/downloads and ~/desktop is happening? I only see the log for the manual scanning. Does that mean I still don’t have the automatic scanning configured correctly (so there is some other deamondo I need to follow the instructions above for because I think the rest I’ve followed successfully) or is the logging of that going somewhere else?</div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Lenore</div></div></div></blockquote></div><br class=""></div></div></div></blockquote></div><br class=""></body></html>