Hi there,
On the latest version (4.5.7) real time protection on Linux systems, can be achieved by:
- Systemwide pre loading the scan library:
update or create /etc/ld.so.preload and add the following line:
/opt/eset/esets/$LIB/libesets_pac.so
- [pac] section adjustment in /etc/opt/eset/esets/esets.cfg or into the WWWI interface
ctl_incl="/" # All filesystems scanned on access
If you do not want all of the filesystems to be scanned, you can specify the one you want in extenso (e.g. ctl_incl=/etc:/home:/lib:/var:/tmp:/usr)
Then in the wwwi interface you should be able to see statistics for the on-access scanning.
You can also test if this is really working, by transferring an "malicious" file or create one like the eicar file (https://en.wikipedia.org/wiki/EICAR_test_file)
For me, this is working correctly and system wide performance is very good, if you test this I would appreciate a feedback on the system performance wise.
Cheers.
Alin