Configure the ClamAV antivirus signature update settings.
sentinel --task=antivirus:signatureupdatesOption |
Value | Default | Description |
|---|---|---|---|
--DatabaseDirectory |
<string> | /var/lib/clamav | Path to the database directory. WARNING: It must match the directive in clamd.conf |
--PidFile |
<string> | /run/freshclam.pid | Save a process identifier of the daemon. |
--DatabaseOwner |
<string> | clamupdate | By default when started freshclam drops privileges and switches to the "clamav" user. This directive allows you to change the database owner. |
--DNSDatabaseInfo |
<string> | current.cvd.clamav.net | Use DNS to verify virus database version. Freshclam uses DNS TXT records to verify database and software versions. With this directive you can change the database verification domain. |
--DatabaseMirror |
<string1,string2> | database.clamav.net | The primary domain name database.clamav.net is to be used world-wide. Now that CloudFlare is being used as the Content Delivery Network (CDN), this one domain name works world-wide to direct freshclam to the closest geographic endpoint. |
--MaxAttempts |
<digit> | 3 | How many attempts to make before giving up (per mirror). |
--ScriptedUpdates |
<yes|no> | yes | With this option you can control scripted updates. It is highly recommended to keep it enabled. |
--CompressLocalDatabase |
<yes|no> | no | By default freshclam will keep the local databases (.cld) uncompressed to make their handling faster. With this option you can enable the compression; the change will take effect with the next database update. |
--DatabaseCustomURL |
<string1,string2> | Provide custom sources for database files. Supports http(s)://, ftp(s)://, or file:// | |
--DatabaseCustomURL_add |
<string> | Add a single entry to DatabaseCustomURL. | |
--DatabaseCustomURL_del |
<string> | Remove a single entry from DatabaseCustomURL. | |
--PrivateMirror |
<string1,string2> | Point freshclam to private mirrors. If PrivateMirror is set, freshclam does not attempt to use DNS to determine whether its databases are out-of-date, instead it will use the If-Modified-Since request or directly check the headers of the remote database files. For each database, freshclam first attempts to download the CLD file. If that fails, it tries to download the CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo and ScriptedUpdates. It can be used multiple times to provide fall-back mirrors. | |
--PrivateMirror_add |
<string> | Add a single entry to PrivateMirror. | |
--PrivateMirror_del |
<string> | Remove a single entry from PrivateMirror. | |
--Checks |
<digit> | 12 | Number of database checks per day (default is every 2 hours). |
--HTTPProxyServer |
<string> | Proxy server hostname. | |
--HTTPProxyPort |
<digit> | Proxy server port number. | |
--HTTPProxyUsername |
<string> | Proxy server username. | |
--HTTPProxyPassword |
<string> | Proxy server password. | |
--HTTPUserAgent |
<string> | Proxy server user agent. | |
--LocalIPAddress |
<string> | Use aaa.bbb.ccc.ddd as client address for downloading databases. Useful for multi-homed systems. | |
--NotifyClamd |
<string> | Enter the full path to the clamd config. e.g. /path/to/clamd.conf to notify a running clamd to reload its database after a download has occurred. The default is to not notify clamd. When NotifyClamd is not set it will use the SelfCheck interval in clamd.conf instead. | |
--OnUpdateExecute |
<string> | Run command after successful database update. | |
--OnErrorExecute |
<string> | Run command when database update process fails. | |
--OnOutdatedExecute |
<string> | Run command when freshclam reports outdated version. | |
--Foreground |
<yes|no> | no | Do not fork into background. |
--Debug |
<yes|no> | no | Enable debug messages in libclamav. |
--ConnectTimeout |
<digit> | 30 | Timeout in seconds when connecting to database server. |
--ReceiveTimeout |
<digit> | 900 | Timeout in seconds when reading from database server. |
--TestDatabases |
<yes|no> | yes | When enabled, freshclam will attempt to load new databases into memory to make sure they are properly handled by libclamav before replacing the old ones. |
--Bytecode |
<yes|no> | yes | Enable downloading of bytecode.cvd, which includes additional detection mechanisms and improvements to the antivirus engine. |
--ExtraDatabase |
<string1,string2> | Download an additional 3rd party signature database distributed through the ClamAV mirrors. | |
--ExtraDatabase_add |
<string> | Add a single entry to ExtraDatabase. | |
--ExtraDatabase_del |
<string> | Remove a single entry from ExtraDatabase. | |
--UpdateLogFile |
<string> | /var/log/freshclam.log | Path to the log file. Make sure it has proper permissions. |
--LogFileMaxSize |
<string> | 1M | Maximum size of the log file. A value of 0 disabled the limit. You may use M/m for megabytes or K/k for kilobytes. |
--LogTime |
<yes|no> | yes | Log the time with each message. |
--LogVerbose |
<yes|no> | no | Enable verbose logging. |
--LogSyslog |
<yes|no> | yes | Use system logger. This can work together with the log file. |
--LogFacility |
<string> | LOG_LOCAL6 | Specify the type of syslog messages. |
--LogRotate |
<yes|no> | yes | Enable log rotation. Always enabled when LogFileMaxSize is enabled. |
--default |
<yes> | Reset all settings to their default values. | |
--default_option |
<option> | Reset a specific setting to its default value. | |
--restart |
<yes> | Restart the service after saving settings. |
// set the ReceiveTimeout
sentinel --task=antivirus:signatureupdates --ReceiveTimeout=1200 --restart=yes
// reset the ReceiveTimeout back to its default value
sentinel --task=antivirus:signatureupdates --default_option=ReceiveTimeout --restart=yes
// reset all settings to their default values
sentinel --task=antivirus:signatureupdates --default=yes --restart=yes