Feature Request OnAccessExcludeRegex

[goshansp]

Feature Request

While extending OnAccessIncludePath to cover as much of the Linux filesystem as possible, finer granularity than the currently used OnAccessExcludePath is required. I. e. one objective of this Ansible Role is to achieve feature parity with commercial anti malware products. Hence it would be beneficial for clamonacc flexibility if it was possible to apply a finer set of exclusion rules. The feature is requested for RHEL7 / Kernel 3.10

Examples of Exlusions

• Filename (i.e. underwhateverpath.log)
• File Path (i.e. /usr/lib64/ld-2.33.so)
• File Suffix (i.e. *.log)

Proposed Feature Addition

All the above exclusions could be addressed using regex. Implementation of a configuration parameter i.e. OnAccessExcludeRegex would greatly improve granularity for exclusions for clamonacc.

Funding

Our customer is FOSS aware and will most likely require finer granularity for clamonacc to pass evaluation. Please advice if you know of a commercial developer who can offer a pricetag for the implementation. We'll be happy to arrange for funding and I welcome any help we get.

[micahsnyder]

See also #1074 and this proposed solution adding regex support to the existing OnAccessExcludePath option: #1314