ClamAV Puppet Module

This module provides mechanisms to manage clamav, allowing for the creation of scheduled scans via the clamav::scan define as well as running the clamd daemon using the clamav::clamd class.

Examples

Setup a clamav scan that scans everything except the /sys and /dev, and does not run on a schedule.

 clamav::scan { 'all-but-sys-and-dev':
   exclude_dir => ['(?i)/^\/(sys|dev)/'],
   scan        => ['/'],
   enable      => false,
 }

Add signature and file whitelist entries in /var/lib/clamav/local.ign2, /var/lib/clamav/local.sfp, and /var/lib/clamav/local.fp:

class { 'clamav':
  whitelist_sig => [
    'ClamAV-Test-Signature',
    'Eicar-Test-Signature:bc356bae4c42f19a3de16e333ba3569c',
  ],
  whitelist_sha => [
    'da39a3ee5e6b4b0d3255bfef95601890afd80709',
    'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855',
  ],
  whitelist_md5 => [ 'd41d8cd98f00b204e9800998ecf8427e' ]
}

Enable clamd:

include clamav::clamd

Enable clamd and setup on-access scanning

class { 'clamav::clamd':
  scan_on_access          => 'yes',
  on_access_max_file_size => '15M',
  on_access_exclude_path  => [ '/srv/noscan' ],
  on_access_include_path  => [ '/srv' ],
}

License

See LICENSE file

Copyright

Copyright © 2015 The Regents of the University of California

Contact

Aaron Russo arusso@berkeley.edu

Support

Please log tickets and issues at the Projects site