64
64
# Default: hardcoded (depends on installation options)
65
65
#DatabaseDirectory /var/lib/clamav
67
# Only load the official signatures published by the ClamAV project.
69
#OfficialDatabaseOnly no
67
71
# The daemon can work in local mode, network mode or both.
68
72
# Due to security reasons we recommend the local mode.
70
74
# Path to a local socket file the daemon will listen on.
71
75
# Default: disabled (must be specified by a user)
72
LocalSocket /var/run/clamav/clamd
76
#LocalSocket /var/run/clamav/clamd
78
# Sets the group ownership on the unix socket.
79
# Default: disabled (the primary group of the user running clamd)
80
#LocalSocketGroup virusgroup
82
# Sets the permissions on the unix socket to the specified mode.
83
# Default: disabled (socket is world accessible)
74
86
# Remove stale socket after unclean shutdown.
261
# If an email contains URLs ClamAV can download and scan them.
262
# WARNING: This option may open your system to a DoS attack.
263
# Never use it on loaded servers.
267
277
# Scan RFC1341 messages split over many emails.
268
278
# You will need to periodically clean up $TemporaryDirectory/clamav-partial directory.
269
279
# WARNING: This option may open your system to a DoS attack.
407
417
## Clamuko settings
408
## WARNING: This is experimental software. It is very likely it will hang
412
# Enable Clamuko. Dazuko (/dev/dazuko) must be configured and running.
420
# Enable Clamuko. Dazuko must be configured and running. Clamuko supports
421
# both Dazuko (/dev/dazuko) and DazukoFS (/dev/dazukofs.ctrl). DazukoFS
422
# is the preferred option. For more information please visit www.dazuko.org
414
424
#ClamukoScanOnAccess yes
416
# Set access mask for Clamuko.
426
# The number of scanner threads that will be started (DazukoFS only).
427
# Having multiple scanner threads allows Clamuko to serve multiple
428
# processes simultaneously. This is particularly beneficial on SMP machines.
430
#ClamukoScannerCount 3
432
# Don't scan files larger than ClamukoMaxFileSize
433
# Value of 0 disables the limit.
435
#ClamukoMaxFileSize 10M
437
# Set access mask for Clamuko (Dazuko only).
418
439
#ClamukoScanOnOpen yes
419
440
#ClamukoScanOnClose yes
422
443
# Set the include paths (all files inside them will be scanned). You can have
423
444
# multiple ClamukoIncludePath directives but each directory must be added
424
# in a seperate line.
445
# in a seperate line. (Dazuko only)
425
446
# Default: disabled
426
447
#ClamukoIncludePath /home
427
448
#ClamukoIncludePath /students
429
# Set the exclude paths. All subdirectories are also excluded.
450
# Set the exclude paths. All subdirectories are also excluded. (Dazuko only)
430
451
# Default: disabled
431
452
#ClamukoExcludePath /home/bofh
433
# Don't scan files larger than ClamukoMaxFileSize
434
# Value of 0 disables the limit.
436
#ClamukoMaxFileSize 10M
454
# With this option enabled ClamAV will load bytecode from the database.
455
# It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses.
459
# Set bytecode security level.
461
# None - no security at all, meant for debugging. DO NOT USE THIS ON PRODUCTION SYSTEMS
462
# This value is only available if clamav was built with --enable-debug!
463
# TrustSigned - trust bytecode loaded from signed .c[lv]d files,
464
# insert runtime safety checks for bytecode loaded from other sources
465
# Paranoid - don't trust any bytecode, insert runtime checks for all
466
# Recommended: TrustSigned, because bytecode in .cvd files already has these checks
467
# Note that by default only signed bytecode is loaded, currently you can only
468
# load unsigned bytecode in --enable-debug mode.
470
# Default: TrustSigned
471
#BytecodeSecurity TrustSigned
473
# Set bytecode timeout in miliseconds.
476
# BytecodeTimeout 60000