Maldet not reading ignore_inotify

[MajorFault]

Version: Linux Malware Detect v1.6.4
OS: CentOS 7.6.1810

Upon startup, maldet does not read the contents of the ignore_inotify file, hence no --exclude parameter is appended to the inotifywait startup line.

The reason is found in internals/functions, line 1749:
if [ -f "$ignore_inotify" ] && [ ! -s "$ignore_inotify" ]; then

Those two checks are combined with an AND operator but they are mutually exclusive, so they're never true. The "-s" check is true if a file exists and is not empty, but here you negate that check with "! -s".

I guess you wanted to check if the file is NOT empty, hence the code on line 1749 should be changed to:
if [ -f "$ignore_inotify" ] && [ -s "$ignore_inotify" ]; then

I manually changed the code on that line and now our ignore_inotify file contents are properly processed.

[rfxn]

You sir are absolutely correct. Blame report has this on me as introducing some months back during 1.6.4 staging/testing.

This has been fixed and given I just had to re-release for issue #331, this is being pulled in as a fix as well.

Thank you for the detailed bug reports/feedback!