Differences
This shows you the differences between two versions of the page.
linux_wiki:clamav [2018/03/23 15:23] billdozor [clamscan] |
linux_wiki:clamav [2019/05/25 23:50] |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Clamav ====== | ||
- | |||
- | **General Information** | ||
- | |||
- | ClamAV is "an open source antivirus engine for detecting trojans, viruses, malware and other malicious threats." | ||
- | |||
- | Official Site: [[http:// | ||
- | |||
- | **Checklist** | ||
- | * Distro(s): Enterprise Linux 6 | ||
- | * Repo: EPEL | ||
- | |||
- | ---- | ||
- | |||
- | ====== Installation ====== | ||
- | |||
- | * Add the [[linux_wiki: | ||
- | * Install ClamAV< | ||
- | |||
- | ---- | ||
- | |||
- | ====== Configuration ====== | ||
- | |||
- | ===== freshclam ===== | ||
- | |||
- | Virus definition updater for ClamAV. | ||
- | * Config: / | ||
- | * Daily Cron: / | ||
- | |||
- | / | ||
- | <code bash> | ||
- | DatabaseMirror db.us.clamav.net | ||
- | DatabaseMirror db.local.clamav.net | ||
- | </ | ||
- | |||
- | If you have a Squid proxy | ||
- | <code bash> | ||
- | HTTPProxyServer myserverhostname | ||
- | HTTPProxyPort 3128 | ||
- | </ | ||
- | |||
- | Run manual virus updates | ||
- | <code bash> | ||
- | freshclam | ||
- | </ | ||
- | |||
- | ---- | ||
- | |||
- | ====== Operation ====== | ||
- | |||
- | ===== clamscan ===== | ||
- | |||
- | Clamscan is the utility that scans files and directories for viruses. | ||
- | |||
- | Scan a single file | ||
- | <code bash> | ||
- | clamscan myfile | ||
- | </ | ||
- | |||
- | Scan the current working directory | ||
- | <code bash> | ||
- | clamscan | ||
- | </ | ||
- | |||
- | Scan a directory recursively | ||
- | <code bash> | ||
- | clamscan -r / | ||
- | </ | ||
- | |||
- | Scan a stream | ||
- | <code bash> | ||
- | cat myfile | clamscan - | ||
- | </ | ||
- | |||
- | Clamscan return codes | ||
- | * 0 => no virus found | ||
- | * 1 => virus(es) found | ||
- | * 2 => Some error(s) occured | ||
- | |||
- | ---- | ||
- | |||
- | ===== clamdscan ===== | ||
- | |||
- | The clamd service allows for faster scanning of directories and files. | ||
- | |||
- | One off system scan of /home using clamdscan< | ||
- | * / | ||
- | * nice => Less CPU priority for the scan | ||
- | * --fdpass => Pass file descriptor permissions to clamd (allows for a faster scan when clamd is running as a different user) | ||
- | * --log=/ | ||
- | |||
- | ---- | ||