How to Install ClamAV and Configure Daily Scanning on Linux
This article will guide you through the installation of ClamAV on Linux based system. Once installed, we will also configure a daily scan on our Linux based server.
ClamAV is an open source (GPL) antivirus engine designed for detecting Trojans, viruses, malware and other malicious threats on Linux. In this article, we will only be configuring ClamAV to run scheduled/on-demand scans; not resident scans.
A. Install ClamAV
1. Install EPEL repo
Before we can do proceed, you must ensure that you have the EPEL yum repository enabled.
2. Install required ClamAV packages
1
yum install
clamav clamd
1 | yum install clamav clamd |
3. Start the clamd service and set it to auto-start
1
/etc/init.d/clamd on
2
chkconfig clamd on
3
/etc/init.d/clamd start
1 | /etc/init.d/clamd on |
2 | chkconfig clamd on |
3 | /etc/init.d/clamd start |
4. Update ClamAV’s signatures
1
/usr/bin/freshclam
Note: ClamAV will update automatically, as part of /etc/cron.daily/freshclam.
1 | /usr/bin/freshclam |
B. Configure Daily Scan
In this example, we will configure a cronjob to scan the /home/ directory every day:
1. Create cron file:
1
vim /etc/cron.daily/manual_clamscan
Add the following to the file above. Be sure to change SCAN_DIR to the directory that you want to scan:
1
#!/bin/bash
2
SCAN_DIR="/home"
3
LOG_FILE="/var/log/clamav/manual_clamscan.log"
4
/usr/bin/clamscan -i -r $SCAN_DIR >> $LOG_FILE
Give our cron script executable permissions:
1
chmod
+x /etc/cron.daily/manual_clamscan
You can even run the above script to ensure that it works correctly.
And you’re done! That should be the minimum required to
1. install ClamAV and 2. Perform a daily scan of a specific directory.
1 | vim /etc/cron.daily/manual_clamscan |
1 | #!/bin/bash |
2 | SCAN_DIR="/home" |
3 | LOG_FILE="/var/log/clamav/manual_clamscan.log" |
4 | /usr/bin/clamscan -i -r $SCAN_DIR >> $LOG_FILE |
1 | chmod +x /etc/cron.daily/manual_clamscan |
No comments:
Post a Comment