[CentOS] This "find" command

[Rodrigo Barbosa]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, Dec 24, 2005 at 10:49:25AM -0600, rado wrote:
> find is giving me fits!
> 
> this command is really the heart of a backup script I am trying to get
> going.
> 
> here's the line:
> 
> if find / -mtime -1 -type f | xargs clamscan -
> l /var/log/clamav/clamscan-bu-daily.log $clamexcludes -r --no-summary |
> cut -d: -f1 > /usr/local/bin/changedfilelog; then
> 
> and the clamexcludes:
> clamexcludes="--exclude=/sys/bus/pci/drivers --exclude=/proc --
> exclude=/sys/class/scsi_host --exclude=/usr/share/doc/clamav-0.87 --
> exclude=/usr/lib/mailman/tests/msgs "
> 
> kk ...when it's all over...I have to have /var/log/clamav/clamscan-bu-
> daily.log to be w/out FOUND or ERROR words anywhere. if either of these
> words are in that file, the system will not back up but instead, email
> me.
> 
> the immediate problem is...no matter what I try, the find command does
> not perform as I want.
> 
> the file seems to load up like 280,000 files which seems like the total
> system etc.

There are actually easier ways to do it, you know. You can first
run clanscan, then check the logfile with either grep or sed to make
sure it is what you want it to be, and based on that result decide 
what to do with an if statement.

Something like this:

find / -mtime -1 -type f --exec clanscan -l \
	/var/log/camav/clanscan-bu-daily.log \
	$clanexcludes -r --no-summary "{}" \; | \
	cut -d: -f1 > /usr/local/bin/changedfilelog
NOTOK=`cat /var/log/clamav/clamscan-bu-daily.log | sed -n -e '/FOUND/p;/ERROR/p'`

if [ "${NOTOK}" != "" ]; then
	....

I can't actually test this here, since I don't use clanscan, but it is
supposed to do what you want.

[]s

- -- 
Rodrigo Barbosa <rodrigob at suespammers.org>
"Quid quid Latine dictum sit, altum viditur"
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDrf64pdyWzQ5b5ckRAuHbAJkBTw0AMYXRvafnoXdkt4XmawXcdACdGIst
zMezfdBk2VnwhBQpzpJmK50=
=zIME
-----END PGP SIGNATURE-----