Using msec

[jiml8]

When msec runs, it wants to scan my entire system. However, my entire system includes a NAS with a 9TB iscsi share that is permanently mounted to the workstation. That NAS contains backups of my entire system, along with historical backups that now go back for two years.

The consequence of this is that msec is running for at least 12 hours to do its system checks, and while it runs (particularly when chkrootkit runs) scanning that iscsi share, my system's user responsiveness gets poor; the mouse is jerky, kwin responds with lots of lags, and it just generally sucks.

There is no point in scanning that iscsi share; everything there is archival. I do not wish to have to dismount that share to prevent it from being scanned, I just do not want it to be scanned..

How can I do this?

In the security section of mcc, I see an "exceptions" tab, but no explanation for how to use it. Will it work for me to add rules (for every rule available) and specify the exception as /mnt/NAS ?

[ozky]

We have online docs to msec gui and all of our tools.
https://doc.mageia.org/mcc/4/en/content/msecgui.html

[doktor5000]

We also have current documentation: https://doc.mageia.org/mcc/5/en/content/msecgui.html

@jiml8: Maybe also check https://wiki.mageia.org/en/Msec which has some more details.
And to be honest, as you're pretty knowledgeable what you need and what not, you could also uninstall msec and msecgui, although if you want some of the checks that may not be the best option ...

[jiml8]

I had already read the wiki, but was unaware of the information in docs.mageia.org. That information did answer my question; I can prevent the scanning by setting /mnt/NAS as an exception for the various appropriate actions.

Thanks.