Compare commits
1 Commits
820d65151b
...
23e21ae0d2
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
23e21ae0d2 |
@@ -33,7 +33,7 @@
|
||||
- manage required config files
|
||||
- manage cronjob settings via parameters
|
||||
- run cron job to scan the file system (by default starting at root, configurable) via clamdscan
|
||||
- set ConcurrentDatabaseReload option `yes`/`no` to optimize RAM consumption. defaults to `no`
|
||||
- set ConcurrentDatabaseReload option yes/no to optimize RAM consumption
|
||||
- manage services
|
||||
|
||||
## Dependencies
|
||||
|
||||
@@ -107,7 +107,7 @@
|
||||
</li><li>
|
||||
<p>run cron job to scan the file system (by default starting at root, configurable) via clamdscan</p>
|
||||
</li><li>
|
||||
<p>set ConcurrentDatabaseReload option <code>yes</code>/<code>no</code> to optimize RAM consumption. defaults to <code>no</code></p>
|
||||
<p>set ConcurrentDatabaseReload option yes/no to optimize RAM consumption</p>
|
||||
</li><li>
|
||||
<p>manage services</p>
|
||||
</li></ul>
|
||||
|
||||
@@ -107,7 +107,7 @@
|
||||
</li><li>
|
||||
<p>run cron job to scan the file system (by default starting at root, configurable) via clamdscan</p>
|
||||
</li><li>
|
||||
<p>set ConcurrentDatabaseReload option <code>yes</code>/<code>no</code> to optimize RAM consumption. defaults to <code>no</code></p>
|
||||
<p>set ConcurrentDatabaseReload option yes/no to optimize RAM consumption</p>
|
||||
</li><li>
|
||||
<p>manage services</p>
|
||||
</li></ul>
|
||||
|
||||
@@ -158,23 +158,7 @@
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64
|
||||
65
|
||||
66
|
||||
67
|
||||
68
|
||||
69
|
||||
70
|
||||
71
|
||||
72
|
||||
73
|
||||
74
|
||||
75
|
||||
76
|
||||
77
|
||||
78
|
||||
79</pre>
|
||||
63</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
|
||||
@@ -209,7 +193,6 @@ class confdroid_clamav::main::files (
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($cv_freshclam_erb),
|
||||
notify => Service[$cv_freshclam],
|
||||
}
|
||||
|
||||
# freshclam service config file
|
||||
@@ -223,21 +206,6 @@ class confdroid_clamav::main::files (
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($cv_freshclam_svc_erb),
|
||||
notify => Service[$cv_freshclam],
|
||||
}
|
||||
|
||||
# clamd service config file
|
||||
file { $cv_clamd_svc :
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0600',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($cv_clamd_svc_erb),
|
||||
notify => Service[$cv_service],
|
||||
}
|
||||
|
||||
# shell script for scanning and alerting
|
||||
|
||||
@@ -550,11 +550,6 @@ inherited by all classes except defines.
|
||||
<em class="default">(defaults to: <tt>'no'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>whether to enable concurrent database reloads. This is useful when you have multiple clamd instances running on the same machine. If you have only one clamd instance, this should be set to ‘no’.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
</ul>
|
||||
@@ -568,6 +563,10 @@ inherited by all classes except defines.
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
@@ -616,16 +615,10 @@ inherited by all classes except defines.
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94
|
||||
95
|
||||
96
|
||||
97
|
||||
98</pre>
|
||||
92</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 44</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 40</span>
|
||||
|
||||
class confdroid_clamav::params (
|
||||
|
||||
@@ -673,8 +666,6 @@ class confdroid_clamav::params (
|
||||
$cv_freshclam_erb = 'confdroid_clamav/freshclam_conf.erb'
|
||||
$cv_freshclam_svc = '/usr/lib/systemd/system/freshclam.service'
|
||||
$cv_freshclam_svc_erb = 'confdroid_clamav/freshclam_svc.erb'
|
||||
$cv_clamd_svc = '/usr/lib/systemd/system/clamd@.service'
|
||||
$cv_clamd_svc_erb = 'confdroid_clamav/clamd_svc.erb'
|
||||
$cv_shell_script = "${cv_config_d_dir}/scan.sh"
|
||||
$cv_shell_script_erb = 'confdroid_clamav/scan.sh.erb'
|
||||
|
||||
|
||||
@@ -33,7 +33,6 @@ class confdroid_clamav::main::files (
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($cv_freshclam_erb),
|
||||
notify => Service[$cv_freshclam],
|
||||
}
|
||||
|
||||
# freshclam service config file
|
||||
@@ -47,21 +46,6 @@ class confdroid_clamav::main::files (
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($cv_freshclam_svc_erb),
|
||||
notify => Service[$cv_freshclam],
|
||||
}
|
||||
|
||||
# clamd service config file
|
||||
file { $cv_clamd_svc :
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0600',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($cv_clamd_svc_erb),
|
||||
notify => Service[$cv_service],
|
||||
}
|
||||
|
||||
# shell script for scanning and alerting
|
||||
|
||||
@@ -36,10 +36,6 @@
|
||||
# @param [Boolean] cv_enable_freshclam whether to enable the freshclam service
|
||||
# @param [Boolean] cv_enable_clamd whether to enable the clamd service
|
||||
# @param [Boolean] cv_use_excludepaths whether to use advanced exclude paths
|
||||
# @param [String] cv_concurrentdatabasereload whether to enable concurrent
|
||||
# database reloads. This is useful when you have multiple clamd instances
|
||||
# running on the same machine. If you have only one clamd instance, this
|
||||
# should be set to 'no'.
|
||||
##############################################################################
|
||||
class confdroid_clamav::params (
|
||||
|
||||
@@ -87,8 +83,6 @@ class confdroid_clamav::params (
|
||||
$cv_freshclam_erb = 'confdroid_clamav/freshclam_conf.erb'
|
||||
$cv_freshclam_svc = '/usr/lib/systemd/system/freshclam.service'
|
||||
$cv_freshclam_svc_erb = 'confdroid_clamav/freshclam_svc.erb'
|
||||
$cv_clamd_svc = '/usr/lib/systemd/system/clamd@.service'
|
||||
$cv_clamd_svc_erb = 'confdroid_clamav/clamd_svc.erb'
|
||||
$cv_shell_script = "${cv_config_d_dir}/scan.sh"
|
||||
$cv_shell_script_erb = 'confdroid_clamav/scan.sh.erb'
|
||||
|
||||
|
||||
@@ -1,22 +0,0 @@
|
||||
################################################################################
|
||||
### clamd.svc created by Puppet, manual changes will be overwritten!!! ###
|
||||
################################################################################
|
||||
|
||||
[Unit]
|
||||
Description = clamd scanner (%i) daemon
|
||||
Documentation=man:clamd(8) man:clamd.conf(5) https://www.clamav.net/documents/
|
||||
After = syslog.target nss-lookup.target network.target
|
||||
|
||||
[Service]
|
||||
Type = forking
|
||||
ExecStart = /usr/sbin/clamd -c /etc/clamd.d/%i.conf
|
||||
# Reload the database
|
||||
ExecReload=/bin/kill -USR2 $MAINPID
|
||||
Restart = on-failure
|
||||
TimeoutStartSec=420
|
||||
MemoryLimit=1024M
|
||||
CPUQuota=30%
|
||||
Nice=19
|
||||
|
||||
[Install]
|
||||
WantedBy = multi-user.target
|
||||
Reference in New Issue
Block a user