[보안] 리눅스 바이러스 백신 -ClamAV 설치 및 사용하기
1. clamav 사용자 생성
2. 컴파일 및 설치
1.
./configure –enable-static –prefix=/usr/local/clamav
2.
make
3.
make install
3. 디렉토리 생성 및 권한 주기
1.
mkdir /usr/local/clamav/db
2.
mkdir /usr/local/clamav/log
3.
chmod 757 /usr/local/clamav/db /usr/local/clamav/log
4. 설정파일 (/usr/local/clamav/etc) 참고 http://cafe.naver.com/networkhard.cafe?iframe_url=/ArticleRead.nhn%3Farticleid=2050
clamd.conf
#Automatically Generated by clamav-base postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-base
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
LocalSocket /tmp/clamd.ctl
FixStaleSocket yes
User clamav
AllowSupplementaryGroups no
ScanMail no
ScanArchive yes
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ArchiveMaxCompressionRatio 250
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogFile /usr/local/clamav/log/clamav.log
LogTime yes
LogFileMaxSize 1M
PidFile /var/run/clamd.pid
DatabaseDirectory /usr/local/clamav/db
SelfCheck 3600
ScanOLE2 yes
ScanPE yes
DetectBrokenExecutables yes
ScanHTML yes
ArchiveBlockMax no
freshclam.conf
# Automatically created by the clamav-freshclam postinst
# Comments will get lost when you reconfigure the clamav-freshclam package
DatabaseOwner clamav
UpdateLogFile /usr/local/clamav/log/freshclam.log
LogFileMaxSize 0
MaxAttempts 5
# Check for new database 24 times a day
Checks 24
DatabaseMirror db.local.clamav.net
DatabaseMirror database.clamav.net
DatabaseDirectory /usr/local/clamav/db/
NotifyClamd /usr/local/clamav/etc/clamd.conf
DNSDatabaseInfo current.cvd.clamav.net
사용법
/usr/local/clamav/bin/clamscan 현재 디렉토리안의 파일 검사
/usr/local/clamav/bin/clamscan -r 현재 디렉토리 하위 검사
/usr/local/clamav/bin/clamscan -i 오염된 파일만 출력하기
업데이트
/usr/local/clamav/bin/freshclam – cron에 등록하여 하루에 한번 업데이트
RHEL5, Centos5 계열
yum install clamav
![[DB] introduction to MYSQL Cluster](http://nblog.syszone.co.kr/wp-content/themes/hueman/assets/front/img/thumb-medium-empty.png)
