etc/clamav.conf
468b9e48
 ##
 ## Example config file for the Clam AV daemon
 ## Please read the clamav.conf(5) manual before editing this file.
 ##
e89a361a
 
468b9e48
 
 # Comment or remove the line below.
 Example
 
 # Uncomment this option to enable logging.
 # LogFile must be writable for the user running the daemon.
 # Full path is required.
 #LogFile /tmp/clamd.log
 
 # By default the log file is locked for writing - the lock protects against
 # running clamd multiple times (if want to run another clamd, please
 # copy the configuration file, change the LogFile variable, and run
 # the daemon with --config-file option). That's why you shouldn't uncomment
 # this option.
 #LogFileUnlock
 
 # Maximal size of the log file. Default is 1 Mb.
 # Value of 0 disables the limit.
 # You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
 # and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the size
 # in bytes just don't use modifiers.
 #LogFileMaxSize 2M
 
 # Log time with an each message.
 #LogTime
 
50099661
 # Log also clean files. May be useful in debugging but will drastically
 # increase the log size.
 #LogClean
 
468b9e48
 # Use system logger (can work together with LogFile).
 #LogSyslog
 
 # Enable verbose logging.
 #LogVerbose
 
 # This option allows you to save the process identifier of the listening
 # daemon (main thread).
 #PidFile /var/run/clamd.pid
 
50099661
 # Optional path to the global temporary directory.
 # Default is system specific - usually /var/tmp or /tmp.
 #TemporaryDirectory /var/tmp
 
0d98d74c
 # Path to the database directory.
468b9e48
 # Default is the hardcoded directory (mostly /usr/local/share/clamav,
0d98d74c
 # but it depends on installation options).
 #DatabaseDirectory /var/lib/clamav
e89a361a
 
468b9e48
 # The daemon works in local or network mode. Currently the local mode is
 # recommended for security reasons.
 
 # Path to the local socket. The daemon doesn't change the mode of the
 # created file (portability reasons). You may want to create it in a directory
 # which is only accessible for a user running daemon.
 LocalSocket /tmp/clamd
 
c6259ac5
 # Remove stale socket after unclean shutdown.
29e957bf
 #FixStaleSocket
4cd4319e
 
a0faaedf
 # TCP port address.
 #TCPSocket 3310
 
4cd4319e
 # TCP address.
 # By default we bind to INADDR_ANY, probably not wise.
 # Enable the following to provide some degree of protection
 # from the outside world.
 #TCPAddr 127.0.0.1
c6259ac5
 
468b9e48
 # Maximum length the queue of pending connections may grow to.
 # Default is 15.
 #MaxConnectionQueueLength 30
 
 # When activated, input stream (see STREAM command) will be saved to disk before
 # scanning - this allows scanning within archives.
 #StreamSaveToDisk
 
 # Close the connection if this limit is exceeded.
 #StreamMaxLength 10M
 
 # Maximal number of a threads running at the same time.
 # Default is 5, and it should be sufficient for a typical workstation.
 # You may need to increase threads number for a server machine.
 #MaxThreads 10
 
3520af97
 # Waiting for data from a client socket will timeout after this time (seconds).
 # Default is 120. Value of 0 disables the timeout.
 #ReadTimeout 300
468b9e48
 
 # Maximal depth the directories are scanned at.
 MaxDirectoryRecursion 15
 
 # Follow a directory symlinks.
 # SECURITY HINT: You should have enabled directory recursion limit to
 # avoid potential problems.
 #FollowDirectorySymlinks
 
 # Follow regular file symlinks.
 #FollowFileSymlinks
 
 # Do internal checks (eg. check the integrity of the database structures)
 # By default clamd checks itself every 3600 seconds (1 hour).
 #SelfCheck 600
 
9b9ea0ba
 # Execute a command when a virus is found. In the command string %v will
 # be replaced by the virus name.
c72178a4
 #
9b9ea0ba
 #VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v"
c72178a4
 
468b9e48
 # Run as selected user (clamd must be started by root).
 # By default it doesn't drop privileges.
 #User clamav
 
 # Initialize the supplementary group access (for all groups in /etc/group
 # user is added in. clamd must be started by root).
 #AllowSupplementaryGroups
 
 # Don't fork into background. Useful in debugging.
 #Foreground
 
c72178a4
 # Enable debug messages in libclamav.
 #Debug
 
468b9e48
 ##
c561d2a3
 ## Document scanning
 ##
 
 # This option enables scanning of Microsoft Office document macros.
5aad82e2
 ScanOLE2
c561d2a3
 
 ##
468b9e48
 ## Mail support
 ##
 
 # Uncomment this option if you are planning to scan mail files.
 #ScanMail
 
 ##
 ## Archive support
 ##
 
 
 # Comment this line to disable scanning of the archives.
 ScanArchive
 
4cd4319e
 
a0faaedf
 # By default the built-in RAR unpacker is disabled by default because the code
4cd4319e
 # terribly leaks, however it's probably a good idea to enable it.
 #ScanRAR
 
 
468b9e48
 # Options below protect your system against Denial of Service attacks
 # with archive bombs.
 
 # Files in archives larger than this limit won't be scanned.
 # Value of 0 disables the limit.
 # WARNING: Due to the unrarlib implementation, whole files (one by one) in RAR
 #	   archives are decompressed to the memory. That's why never disable
 #	   this limit (but you may increase it of course!)
 ArchiveMaxFileSize 10M
 
 # Archives are scanned recursively - e.g. if Zip archive contains RAR file,
 # the RAR file will be decompressed, too (but only if recursion limit is set
 # at least to 1). With this option you may set the recursion level.
 # Value of 0 disables the limit.
 ArchiveMaxRecursion 5
 
 # Number of files to be scanned within archive.
 # Value of 0 disables the limit.
 ArchiveMaxFiles 1000
 
cf899a29
 # Mark potential archive bombs as viruses (0 disables the limit)
 ArchiveMaxCompressionRatio 200
 
468b9e48
 # Use slower decompression algorithm which uses less memory. This option 
 # affects bzip2 decompressor only.
 #ArchiveLimitMemoryUsage
 
5aad82e2
 # Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR).
8373a9b0
 #ArchiveBlockEncrypted
510c466b
 
 
468b9e48
 ##
 ## Clamuko settings
 ## WARNING: This is experimental software. It is very likely it will hang
 ##	    up your system !!!
 ##
 
 # Enable Clamuko. Dazuko (/dev/dazuko) must be configured and running.
b5ad6489
 #ClamukoScanOnAccess
468b9e48
 
 # Set access mask for Clamuko.
 ClamukoScanOnOpen
 ClamukoScanOnClose
 ClamukoScanOnExec
 
 # Set the include paths (all files in them will be scanned). You can have
 # multiple ClamukoIncludePath options, but each directory must be added
 # in a seperate option. All subdirectories are scanned, too.
 ClamukoIncludePath /home
 #ClamukoIncludePath /students
 
 # Set the exclude paths. All subdirectories are also excluded.
 #ClamukoExcludePath /home/guru
 
 # Limit the file size to be scanned (probably you don't want to scan your movie
 # files ;))
 # Value of 0 disables the limit. 1 Mb should be fine.
 ClamukoMaxFileSize 1M
 
 # Enable archive support. It uses the limits from clamd section.
 # (This option doesn't depend on ScanArchive, you can have archive support
 # in clamd disabled).
 ClamukoScanArchive