## confdroid_clamav::main::config.pp
# Module name: confdroid_clamav
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary  Class manages all aspects of configuring the module logic for
#   confdroid_clamav.
##############################################################################
class confdroid_clamav::main::config (

) inherits confdroid_clamav::params {
  include confdroid_clamav::main::service

  # Ensure the SELinux boolean antivirus_can_scan_system is enabled if disabled
  exec { 'enable_antivirus_can_scan_system':
    command => '/usr/sbin/setsebool -P antivirus_can_scan_system 1',
    unless  => '/usr/sbin/getsebool antivirus_can_scan_system | grep --quiet "on"',
    path    => ['/usr/sbin', '/bin'],
  }

  # create a cron job to run a daily scan
  cron { 'clamscan':
    command => $cv_shell_script,
    user    => $cv_cron_user,
    hour    => $cv_cron_hour,
    minute  => $cv_cron_minute,
  }
}