initial commit of file from CVS for smeserver-clamav on Mon 10 Jul 08:35:52 BST 2023

root/etc/e-smith/templates/etc/clamd.d/scan.conf/AlertBrokenExecutables

@@ -0,0 +1 @@
+AlertBrokenExecutables {$clamav{AlertBrokenExecutables} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/AlertEncrypted

@@ -0,0 +1 @@
+AlertEncrypted { $clamav{AlertEncrypted} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/AlertExceedsMax

@@ -0,0 +1 @@
+AlertExceedsMax { $clamav{AlertExceedsMax} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/AlertOLE2Macros

@@ -0,0 +1 @@
+AlertOLE2Macros { $clamav{AlertOLE2Macros} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/AlertPartitionIntersection

@@ -0,0 +1 @@
+AlertPartitionIntersection { $clamav{AlertPartitionIntersection} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/AlertPhishingCloak

@@ -0,0 +1 @@
+AlertPhishingCloak {$clamav{AlertPhishingCloak} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/AlertPhishingSSLMismatch

@@ -0,0 +1 @@
+AlertPhishingSSLMismatch {$clamav{AlertPhishingSSLMismatch} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/ConcurrentDatabaseReload

@@ -0,0 +1,4 @@
+# Enable for 0.103.x
+# This takes a LOT more ram as it has have the DBs loaded twice
+# Maybe we should check the memory limit before we allow enabling?
+ConcurrentDatabaseReload { $clamav{ConcurrentDatabaseReload} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/DatabaseDirectory

@@ -0,0 +1 @@
+DatabaseDirectory /var/lib/clamav

root/etc/e-smith/templates/etc/clamd.d/scan.conf/Debug

@@ -0,0 +1 @@
+Debug { $clamav{Debug} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/FixStaleSocket

@@ -0,0 +1 @@
+FixStaleSocket yes

root/etc/e-smith/templates/etc/clamd.d/scan.conf/Foreground

@@ -0,0 +1 @@
+Foreground no

root/etc/e-smith/templates/etc/clamd.d/scan.conf/HeuristicAlerts

@@ -0,0 +1 @@
+HeuristicAlerts {$clamav{HeuristicAlerts} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/HeuristicScanPrecedence

@@ -0,0 +1 @@
+HeuristicScanPrecedence { $clamav{HeuristicScanPrecedence} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/IdleTimeout

@@ -0,0 +1,4 @@
+{
+# Waiting for a new job will timeout after this time (seconds).
+    "IdleTimeout $clamav{IdleTimeout}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/LeaveTemporaryFiles

@@ -0,0 +1 @@
+LeaveTemporaryFiles { $clamav{LeaveTemporaryFiles} || 'no' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/LocalSocket

@@ -0,0 +1 @@
+LocalSocket /run/clamd/clamd.socket

root/etc/e-smith/templates/etc/clamd.d/scan.conf/LocalSocketMode

@@ -0,0 +1 @@
+LocalSocketMode 666

root/etc/e-smith/templates/etc/clamd.d/scan.conf/LogClean

@@ -0,0 +1 @@
+LogClean { $clamav{LogClean} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/LogFile

@@ -0,0 +1 @@
+LogFile /var/log/clamd/current

root/etc/e-smith/templates/etc/clamd.d/scan.conf/LogTime

@@ -0,0 +1 @@
+LogTime { $clamav{LogTime} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/LogVerbose

@@ -0,0 +1 @@
+LogVerbose { $clamav{LogVerbose} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/MaxConnectionQueueLength

@@ -0,0 +1,4 @@
+{
+# Maximum length the queue of pending connections may grow to.
+    "MaxConnectionQueueLength $clamav{MaxConnectionQueueLength}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/MaxDirectoryRecursion

@@ -0,0 +1,4 @@
+{
+# Maximal depth directories are scanned at.
+    "MaxDirectoryRecursion $clamav{MaxDirectoryRecursion}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/MaxFileSize

@@ -0,0 +1,5 @@
+{
+# Files in archives larger than this limit won't be scanned.
+# Value of 0 disables the limit.
+    "MaxFileSize $clamav{MaxFileSize}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/MaxFiles

@@ -0,0 +1,5 @@
+{
+# Number of files to be scanned within an archive.
+# Value of 0 disables the limit.
+    "MaxFiles $clamav{MaxFiles}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/MaxRecursion

@@ -0,0 +1,7 @@
+{
+# Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR
+# file, all files within it will also be scanned. This options specifies how
+# deep the process should be continued.
+# Value of 0 disables the limit.
+    "MaxRecursion $clamav{MaxRecursion}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/MaxThreads

@@ -0,0 +1,4 @@
+{
+# Maximal number of threads running at the same time.
+    "MaxThreads $clamav{MaxThreads}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/PidFile

@@ -0,0 +1 @@
+PidFile /run/clamd/clamd.pid

root/etc/e-smith/templates/etc/clamd.d/scan.conf/ReadTimeout

@@ -0,0 +1,5 @@
+{
+# Waiting for data from a client socket will timeout after this time (seconds).
+# Value of 0 disables the timeout.
+    "ReadTimeout $clamav{ReadTimeout}";
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/ScanArchive

@@ -0,0 +1 @@
+ScanArchive { $clamav{ScanArchive} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/ScanHTML

@@ -0,0 +1 @@
+ScanHTML { $clamav{ScanHTML} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/ScanMail

@@ -0,0 +1 @@
+ScanMail { $clamav{ScanMail} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/ScanOLE2

@@ -0,0 +1 @@
+ScanOLE2 { $clamav{ScanOLE2} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/ScanPE

@@ -0,0 +1 @@
+ScanPE { $clamav{ScanPE} || 'yes' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/SelfCheck

@@ -0,0 +1,2 @@
+# Perform internal sanity check (database integrity and freshness).
+SelfCheck { $clamav{SelfCheck} || '600' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/StreamMaxLength

@@ -0,0 +1,2 @@
+# Close the connection if this limit is exceeded.
+StreamMaxLength { $clamav{StreamMaxLength} || '25M' }

root/etc/e-smith/templates/etc/clamd.d/scan.conf/TCPAddr

@@ -0,0 +1,7 @@
+{
+# TCP address.
+# By default we bind to INADDR_ANY, probably not wise.
+# Enable the following to provide some degree of protection
+# from the outside world.
+    $clamav{TCPAddr} ? "TCPAddr $clamav{TCPAddr}" : '#TCPAddr 127.0.0.1';
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/TCPSocket

@@ -0,0 +1,4 @@
+{
+# TCP port address.
+    $clamav{TCPSocket} ? "TCPSocket $clamav{TCPSocket}" : '#TCPSocket 3310';
+}

root/etc/e-smith/templates/etc/clamd.d/scan.conf/TemporaryDirectory

@@ -0,0 +1 @@
+TemporaryDirectory /var/tmp

root/etc/e-smith/templates/etc/clamd.d/scan.conf/User

@@ -0,0 +1 @@
+User clamscan

root/etc/e-smith/templates/etc/cron.daily/freshclam/10freshclam

@@ -0,0 +1,4 @@
+#! /bin/sh
+# We do not run freshclam here, because an always-running supervised freshclam
+# is used in SME Server
+exit 0

root/etc/e-smith/templates/etc/crontab/clamav

@@ -0,0 +1,14 @@
+{
+    my $min = substr(gmtime,14,2);
+
+    $OUT .= "\n";
+    $OUT .= "# smeserver-clamscan filesystem scan\n";
+    my $ScanFreq = $clamav{FilesystemScan} || 'disabled';
+    if ($ScanFreq eq 'daily') {
+        $OUT .= $min."\t0\t*\t*\t*\troot\t/sbin/e-smith/smeserver-clamscan\n";
+    } elsif ($ScanFreq eq 'weekly') {
+        $OUT .= $min."\t0\t*\t*\t6\troot\t/sbin/e-smith/smeserver-clamscan\n";
+    } else {
+        $OUT .= "# disabled\n";
+    }
+}

root/etc/e-smith/templates/etc/freshclam.conf/Checks

@@ -0,0 +1,3 @@
+{
+    "Checks $clamav{Checks}";
+}

root/etc/e-smith/templates/etc/freshclam.conf/DNSDatabaseInfo

@@ -0,0 +1,7 @@
+{
+# Use DNS to verify virus database version. Freshclam uses DNS TXT records
+# to verify database and software versions. We highly recommend enabling
+# this option.
+    "DNSDatabaseInfo $clamav{DNSDatabaseInfo}";
+}
+

root/etc/e-smith/templates/etc/freshclam.conf/DatabaseDirectory

@@ -0,0 +1 @@
+DatabaseDirectory /var/lib/clamav

root/etc/e-smith/templates/etc/freshclam.conf/DatabaseMirror

@@ -0,0 +1,13 @@
+{
+# Uncomment the following line and replace XY with your country
+# code. See http://www.iana.org/cctld/cctld-whois.htm for the full list.
+# Default: There is no default, which results in an error when running freshclam
+
+    $OUT = "DatabaseMirror $clamav{DatabaseMirror}\n";
+
+# database.clamav.net is a round-robin record which points to our most 
+# reliable mirrors. It's used as a fall back in case db.XY.clamav.net is 
+# not working. DO NOT TOUCH the following line unless you know what you
+# are doing.
+    $OUT .= "DatabaseMirror database.clamav.net";
+}

root/etc/e-smith/templates/etc/freshclam.conf/DatabaseOwner

@@ -0,0 +1 @@
+DatabaseOwner clamupdate

root/etc/e-smith/templates/etc/freshclam.conf/Foreground

@@ -0,0 +1 @@
+Foreground no

root/etc/e-smith/templates/etc/freshclam.conf/LogTime

@@ -0,0 +1 @@
+LogTime { $clamav{LogTime} || 'yes' }

root/etc/e-smith/templates/etc/freshclam.conf/LogVerbose

@@ -0,0 +1 @@
+LogVerbose { $clamav{LogVerbose} || 'yes' }

root/etc/e-smith/templates/etc/freshclam.conf/MaxAttempts

@@ -0,0 +1,4 @@
+{
+# How many attempts to make before giving up.
+    "MaxAttempts $clamav{MaxAttempts}";
+}

root/etc/e-smith/templates/etc/freshclam.conf/NotifyClamd

@@ -0,0 +1 @@
+NotifyClamd /etc/clamd.d/scan.conf

root/etc/e-smith/templates/etc/freshclam.conf/OnErrorExecute

@@ -0,0 +1 @@
+OnErrorExecute "/sbin/e-smith/freshclam-update-failed"

root/etc/e-smith/templates/etc/freshclam.conf/OnUpdateExecute

@@ -0,0 +1 @@
+OnUpdateExecute "/sbin/e-smith/freshclam-update-ok"

root/etc/e-smith/templates/etc/freshclam.conf/ProxySettings

@@ -0,0 +1,14 @@
+{
+# Proxy settings
+
+    $OUT = '';
+
+    for ( qw(Server Port Username Password) )
+    {
+	my $name = "HTTPProxy$_";
+
+	next unless $clamav{$name};
+
+	$OUT .= "$name $clamav{$name}\n";
+    }
+}

root/etc/e-smith/templates/etc/freshclam.conf/UpdateLogFile

@@ -0,0 +1 @@
+UpdateLogFile /var/log/freshclam/current

root/etc/e-smith/templates/etc/logrotate.d/clamd/clamd.logrotate

@@ -0,0 +1,10 @@
+# 
+    /var/log/clamd/current \{
+    monthly
+    notifempty
+    missingok
+
+    postrotate
+        /bin/kill -HUP `cat /var/run/clamd/clamd.pid 2> /dev/null` 2> /dev/null || true
+    endscript
+\}

root/etc/e-smith/templates/etc/logrotate.d/freshclam/freshclamd.logrotate

@@ -0,0 +1,8 @@
+/var/log/freshclam/current \{
+        monthly
+        notifempty
+        missingok
+        postrotate
+                systemctl try-restart freshclam.service
+        endscript
+\}

root/etc/e-smith/templates/usr/lib/systemd/system/clamd.service.d/50koozali.conf/40service

@@ -0,0 +1,7 @@
+[Service]
+{
+    # memory limit to catch any memory leak before it kills the system
+    $OUT .= "MemoryLimit=";
+    $OUT .= ($clamd{MemLimit} > "1610612736") ? $clamd{MemLimit} : "1610612736";
+}
+

root/etc/e-smith/templates/usr/lib/tmpfiles.d/clamd.conf/clamd.conf

@@ -0,0 +1 @@
+d /run/clamd 0755 clamscan virusgroup