User Tools

Site Tools


сервис_clamav

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
сервис_clamav [2020/08/28 17:22]
val
сервис_clamav [2022/09/07 13:42]
val [Debian/Ubuntu]
Line 27: Line 27:
  
 <​code>​ <​code>​
-root@gate:​~#​ service clamav-freshclam ​status+root@gate:​~#​ service clamav-freshclam ​stop 
 +</​code><​code>​ 
 +root@gate:​~#​ rm /​var/​lib/​clamav/​freshclam.dat
  
 +root@gate:​~#​ cat /​etc/​clamav/​freshclam.conf
 +</​code><​code>​
 +...
 +HTTPProxyServer gate.isp.un
 +HTTPProxyPort 3128
 +</​code><​code>​
 +root@gate:​~#​ service clamav-freshclam start
 +</​code>​
 +
 +ИЛИ
 +
 +<​code>​
 +root@gate:​~#​ wget -O /​var/​lib/​clamav/​main.cld https://​val.bmstu.ru/​unix/​clamav/​main.cld
 +root@gate:​~#​ wget -O /​var/​lib/​clamav/​daily.cld https://​val.bmstu.ru/​unix/​clamav/​daily.cld
 +</​code><​code>​
 root@gate:​~#​ ls /​var/​lib/​clamav/​ root@gate:​~#​ ls /​var/​lib/​clamav/​
  
Line 42: Line 59:
 $ cd /tmp $ cd /tmp
  
-$ wget http://val.bmstu.ru/​unix/​virus.zip+$ wget http://gate.isp.un/​unix/​virus.zip
  
 $ clamdscan virus.zip $ clamdscan virus.zip
Line 49: Line 66:
 ==== API ядра FANOTIFY ==== ==== API ядра FANOTIFY ====
  
 +  * !!! Проверяет только в момент чтения,​ НЕ записи!
 +  * [[https://​www.clamav.net/​documents/​on-access-scanning|On-Access Scanning]]
   * [[https://​blog.clamav.net/​2016/​03/​configuring-on-access-scanning-in-clamav.html|Configuring On-Access Scanning in ClamAV]]   * [[https://​blog.clamav.net/​2016/​03/​configuring-on-access-scanning-in-clamav.html|Configuring On-Access Scanning in ClamAV]]
-  * Для ubuntu отключить ​[[Модуль AppArmor]]+  * [[Модуль AppArmor]]
  
 <​code>​ <​code>​
Line 58: Line 77:
 </​code><​code>​ </​code><​code>​
 ... ...
-User root +OnAccessIncludePath /disk2
-ScanOnAccess yes +
-OnAccessIncludePath /home +
-OnAccessExcludeUID 0+
 OnAccessPrevention yes OnAccessPrevention yes
-...+OnAccessExcludeUname clamav 
 +</​code><​code>​ 
 +# clamonacc
 </​code>​ </​code>​
 ===== Журнал ===== ===== Журнал =====
 <​code>​ <​code>​
 # tail -f /​var/​log/​clamav/​clamav.log # tail -f /​var/​log/​clamav/​clamav.log
- 
-debian# cat /​etc/​logrotate.d/​clamav-daemon 
 </​code>​ </​code>​
сервис_clamav.txt · Last modified: 2024/05/04 11:35 by val