@@ -807,6 +807,7 @@ onas_fan_checkowner (int pid, const struct optstruct *opts)

 {

     char path[32];

     STATBUF sb;

+    int num_arg;

     const struct optstruct *opt;

     if (pid == (int) getpid()) {

@@ -821,7 +822,9 @@ onas_fan_checkowner (int pid, const struct optstruct *opts)

     {

         while (opt)

         {

-            if (opt->numarg == (long long) sb.st_uid)

+            /* We use UID 0 in place of -1 because the option would be disabled for UID 0*/

+            (opt->numarg == -1) ? (num_arg = 0) : (num_arg = opt->numarg);

+            if (num_arg == (long long) sb.st_uid)

                 return 1;

             opt = opt->nextarg;

         }

@@ -610,10 +610,11 @@ Example

 #OnAccessExcludePath /home/bofh

 # With this option you can whitelist specific UIDs. Processes with these UIDs

-# will be able to access all files.

+# will be able to access all files. For UID 0 please use a value of -1 since

+# a value of 0 will disable this option.

 # This option can be used multiple times (one per line).

 # Default: disabled

-#OnAccessExcludeUID 0

+#OnAccessExcludeUID -1

 # Toggles dynamic directory determination. Allows for recursively watching include paths.

 # (On-access scan only)

@@ -404,7 +404,7 @@ const struct clam_option __clam_options[] = {

     { "OnAccessExcludePath", NULL, 0, CLOPT_TYPE_STRING, NULL, -1, NULL, FLAG_MULTIPLE, OPT_CLAMD, "This option allows excluding directories from on-access scanning. It can\nbe used multiple times. Only works with DDD system.", "/home/bofh\n/root" },

-    { "OnAccessExcludeUID", NULL, 0, CLOPT_TYPE_NUMBER, MATCH_NUMBER, -1, NULL, FLAG_MULTIPLE, OPT_CLAMD, "With this option you can whitelist specific UIDs. Processes with these UIDs\nwill be able to access all files.\nThis option can be used multiple times (one per line).", "0" },

+    { "OnAccessExcludeUID", NULL, 0, CLOPT_TYPE_NUMBER, NULL, -1, NULL, FLAG_MULTIPLE, OPT_CLAMD, "With this option you can whitelist specific UIDs. Processes with these UIDs\nwill be able to access all files.\nThis option can be used multiple times (one per line). For a UID of 0 please use the value -1 instead, since 0 will disable this option.", "0" },

     { "OnAccessMaxFileSize", NULL, 0, CLOPT_TYPE_SIZE, MATCH_SIZE, 5242880, NULL, 0, OPT_CLAMD, "Files larger than this value will not be scanned in on access.", "5M" },