ClamAV "extra options"

sebeksd · 23. September 2020

Hi.

My clamav scans give me some warnings for example "MaxDirectoryRecursion" so I tried to change that through "extra options" configuration but it was not working.

Checking "/etc/clamav/clamd.conf" I saw that extra options are on bottom of the file and defaults are on top, moving "extra options" to the top of the file make it working.

So I check it further and found in source code and it seems that defaults are taken from Open Media Vault variables. Now I'm a little bit confused, what is correct way to configure ClamAV, extra options seems to be correct way from user point of view (its in GUI, variables are not). Maybe variables in this case are legacy way?

If "extra options" have priority then moving them to the top of clamd.conf should solve that issue (it seems clam is reading only first appearance of the parameter).

votdev · 23. September 2020

You should use the environment variable OMV_CLAMAV_CLAMD_MAXDIRECTORYRECURSION to customize it.

sebeksd · 23. September 2020

Hmm, so maybe a warning near "Extra options" ? Most clamav parameters won't work because there are default values in conf file so this field is kind of confusing.

sebeksd · 25. September 2020

Something is wrong with "OMV_CLAMAV_CLAMD_MAXDIRECTORYRECURSION", after setting it up in "/etc/default/openmediavault" and running "sudo omv-salt stage run prepare" it still shows old value in "/etc/clamav/clamd.conf".

Code

root@SERVER:~# cat /etc/clamav/clamd.conf
# This file is auto-generated by openmediavault (https://www.openmediavault.org)
# WARNING: Do not edit this file, your changes will get lost.

LocalSocket /run/clamav/clamd.ctl
FixStaleSocket true
LocalSocketGroup clamav
LocalSocketMode 666
AlertEncrypted false
AlertEncryptedArchive false
AlertEncryptedDoc false
MaxDirectoryRecursion 15
FollowDirectorySymlinks False
FollowFileSymlinks False
ReadTimeout 120
MaxThreads 12
MaxConnectionQueueLength 15
LogSyslog false
LogRotate false
LogFacility LOG_LOCAL6
LogClean False
LogVerbose false
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
Foreground false
Debug false
ScanPE True
MaxEmbeddedPE 10M
ScanOLE2 True
ScanPDF True
ScanHTML True
MaxHTMLNormalize 10M
MaxHTMLNoTags 2M
MaxScriptNormalize 5M
MaxZipTypeRcg 1M
ScanSWF true
ScanELF True
ScanArchive True
ScanMail false
AlertBrokenExecutables False
ExitOnOOM false
LeaveTemporaryFiles false
HeuristicAlerts True
IdleTimeout 30
PhishingSignatures true
PhishingScanURLs false
AlertPhishingSSLMismatch false
AlertPhishingCloak false
AlertPartitionIntersection false
DetectPUA False
ScanPartialMessages false
HeuristicScanPrecedence false
StructuredDataDetection false
CommandReadTimeout 30
SendBufTimeout 500
MaxQueue 100
ExtendedDetectionInfo true
AlertOLE2Macros false
AllowAllMatchScan true
ForceToDisk false
DisableCertCheck false
DisableCache false
MaxScanSize 100M
MaxFileSize 25M
MaxRecursion 16
MaxFiles 10000
MaxPartitions 50
MaxIconsPE 100
PCREMatchLimit 10000
PCRERecMatchLimit 5000
PCREMaxFileSize 25M
ScanXMLDOCS true
ScanHWP3 true
MaxRecHWP3 16
StreamMaxLength 25M
LogFile /var/log/clamav/clamav.log
LogTime true
LogFileUnlock false
LogFileMaxSize 0
Bytecode true
BytecodeSecurity TrustSigned
BytecodeTimeout 60000
OfficialDatabaseOnly false
CrossFilesystems true
VirusEvent /bin/run-parts --lsbsysinit -- /etc/clamav/virusevent.d/
User clamav
OnAccessMaxFileSize 100M
OnAccessMaxThreads 5
OnAccessDisableDDD false
OnAccessPrevention true
OnAccessExtraScanning true
OnAccessExcludeUname clamav
OnAccessRetryAttempts 3

Alles anzeigen

Code

root@SERVER:~# cat /etc/default/openmediavault
# This file is part of OpenMediaVault.
#
# @license   http://www.gnu.org/licenses/gpl.html GPL Version 3
# @author    Volker Theile <volker.theile@openmediavault.org>
# @copyright Copyright (c) 2009-2020 Volker Theile
#
# OpenMediaVault is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# any later version.
#
# OpenMediaVault is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with OpenMediaVault. If not, see <http://www.gnu.org/licenses/>.

# Global default values. Please restart the openmediavault-engined systemd
# service to take changes into affect.
OMV_CONFIG_FILE="/etc/openmediavault/config.xml"
OMV_CONFIG_TEMPLATE_FILE="/usr/share/openmediavault/templates/config.xml"
OMV_PRODUCTINFO_FILE="/usr/share/openmediavault/productinfo.xml"
OMV_SCRIPTS_DIR="/usr/share/openmediavault/scripts"
OMV_DATAMODELS_DIR="/usr/share/openmediavault/datamodels"
OMV_I18N_LOCALE_DIR="/usr/share/openmediavault/locale"
OMV_MOUNT_DIR="/srv"
OMV_SHAREDFOLDERS_DIR="/sharedfolders"
OMV_SHAREDFOLDERS_DIR_ENABLED="NO"
OMV_NFSD_EXPORT_DIR="/export"
OMV_CACHE_DIR="/var/cache/openmediavault"
OMV_LOG_DIR="/var/log/openmediavault"
OMV_SSL_CERTIFICATE_DIR="/etc/ssl"
OMV_SSL_CERTIFICATE_PREFIX="openmediavault-"
OMV_SSH_KEYS_DIR="/etc/ssh"
OMV_SSH_KEY_PREFIX="openmediavault-"
OMV_DPKGARCHIVE_DIR="/var/cache/openmediavault/archives"
OMV_DOCUMENTROOT_DIR="/var/www/openmediavault"
OMV_CRONSCRIPTS_DIR="/var/lib/openmediavault/cron.d"
OMV_CONFIGIMPORT_SCRIPTS_DIR="/usr/share/openmediavault/configimport"
OMV_SALT_SCRIPTS_DEPLOY_DIR="/srv/salt/omv/deploy"
OMV_ENGINED_DIR="/usr/share/openmediavault/engined"
OMV_ENGINED_SO_ADDRESS="/var/lib/openmediavault/engined.sock"
OMV_ENGINED_SO_OWNERGROUP_NAME="openmediavault-engined"
OMV_ENGINED_SO_SNDTIMEO=10
OMV_ENGINED_SO_RCVTIMEO=180
OMV_ENGINED_DIRTY_MODULES_FILE="/var/lib/openmediavault/dirtymodules.json"
OMV_INITDB_SCRIPTS_DIR="/usr/share/openmediavault/initsystem"
OMV_INITDB_FILE="/var/lib/openmediavault/initsystem.req"
OMV_USERMGMT_DEFAULT_GROUP="users"
OMV_RRDGRAPH_DIR="/var/lib/openmediavault/rrd"
OMV_RRDGRAPH_ERROR_IMAGE="/usr/share/openmediavault/icons/rrd_graph_error_64.png"
OMV_WEBGUI_ADMINUSER_NAME="admin"
OMV_WEBGUI_ADMINGROUP_NAME="openmediavault-admin"
OMV_WEBGUI_FILE_OWNERGROUP_NAME="openmediavault-webgui"
OMV_CONFIGOBJECT_NEW_UUID="fa4b1c66-ef79-11e5-87a0-0002b3a176b4"
OMV_DEBUG_SCRIPT="NO"
OMV_DEBUG_PHP="NO"
OMV_DEBUG_EXTJS="NO"
OMV_COLLECTD_RRDTOOL_GRAPH_WIDTH=800
OMV_COLLECTD_RRDTOOL_GRAPH_HEIGHT=150
OMV_MONIT_SERVICE_SYSTEM_LOADAVG_5MIN_MULT=14
OMV_CLAMAV_CLAMD_MAXDIRECTORYRECURSION=50

Alles anzeigen

votdev · 25. September 2020

You didn't run omv-salt deploy run clamav.

sebeksd · 25. September 2020

Thanks.

Now I made simple script to not forget these in future

ApplyConfigs.sh:

Bash

#!/bin/bash
monit restart omv-engined
omv-salt stage run prepare
omv-salt stage run deploy

Jetzt mitmachen!

Tags