File: clamav-daemon.templates

package info (click to toggle)
clamav 0.101.4+dfsg-0+deb9u1
  • links: PTS, VCS
  • area: main
  • in suites: stretch
  • size: 29,564 kB
  • sloc: ansic: 158,978; sh: 8,178; cpp: 5,173; makefile: 2,088; yacc: 1,351; lex: 714; python: 120; perl: 17
file content (274 lines) | stat: -rw-r--r-- 9,353 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
# These templates have been reviewed by the debian-l10n-english
# team
#
# If modifications/additions/rewording are needed, please ask
# debian-l10n-english@lists.debian.org for advice.
#
# Even minor modifications require translation updates and such
# changes should be coordinated with translators and reviewers.

Template: clamav-daemon/debconf
Type: boolean
Default: true
_Description: Handle the configuration file automatically?
 Some options must be configured for clamav-daemon.
 .
 The ClamAV suite won't work if it isn't configured. If you do not
 configure it automatically, you'll have to configure
 /etc/clamav/clamd.conf manually or run 'dpkg-reconfigure clamav-daemon'
 later. In any case, manual changes in /etc/clamav/clamd.conf will
 be respected.

Template: clamav-daemon/TcpOrLocal
Type: select
Choices: TCP, UNIX
Default: UNIX
_Description: Socket type:
 Please choose the type of socket clamd will be listening on.
 .
 If you choose TCP, clamd can be accessed remotely. If you choose local
 UNIX sockets, clamd can be accessed through a file. Local UNIX sockets
 are recommended for security reasons.

Template: clamav-daemon/LocalSocket
Type: string
Default: /var/run/clamav/clamd.ctl
_Description: Local (UNIX) socket clamd will listen on:

Template: clamav-daemon/FixStaleSocket
Type: boolean
Default: true
_Description: Gracefully handle left-over UNIX socket files?

Template: clamav-daemon/LocalSocketGroup
Type: string
Default: clamav
_Description: Group owner of clamd local (UNIX) socket:

Template: clamav-daemon/LocalSocketMode
Type: string
Default: 666
_Description: Creation mode for clamd local (UNIX) socket:

Template: clamav-daemon/TCPSocket
Type: string
Default: 3310
_Description: TCP port clamd will listen on:

Template: clamav-daemon/TCPAddr
Type: string
Default: any
_Description: IP address clamd will listen on:
 Enter "any" to listen on every IP address configured. If you want
 to listen on a single address or host name, enter it here.

Template: clamav-daemon/ScanMail
Type: boolean
Default: true
_Description: Do you want to enable mail scanning?
 This option enables scanning mail contents for viruses.
 You need this option enabled if you want to use clamav-milter, or if
 you want to enable phishing checks.

Template: clamav-daemon/ScanArchive
Type: boolean
Default: true
_Description: Do you want to enable archive scanning?
 If archive scanning is enabled, the daemon will extract archives such as
 bz2, tar.gz, deb and many more, to check their contents for viruses.
 .
 For more information about what archives are supported, see
 /usr/share/doc/clamav-docs/clamdoc.pdf or the manpage clamscan(5).

Template: clamav-daemon/StreamMaxLength
Type: string
Default: 25
_Description: Maximum stream length (unit Mb) allowed:
 You can set a limit on the stream length that can be scanned.

Template: clamav-daemon/MaxDirectoryRecursion
Type: string
Default: 0
_Description: Maximum directory depth that will be allowed:
 This value must be set if you want to allow the daemon to follow
 directory symlinks.
 .
 Entering '0' will disable this limit.

Template: clamav-daemon/FollowDirectorySymlinks
Type: boolean
Default: false
_Description: Do you want the daemon to follow directory symlinks?

Template: clamav-daemon/FollowFileSymlinks
Type: boolean
Default: false
_Description: Do you want the daemon to follow regular file symlinks?

Template: clamav-daemon/ReadTimeout
Type: string
Default: 180
_Description: Timeout for stopping the thread-scanner (seconds):
 Entering '0' will disable the timeout.

Template: clamav-daemon/MaxThreads
Type: string
Default: 12
_Description: Number of threads for the daemon:

Template: clamav-daemon/MaxConnectionQueueLength
Type: string
Default: 15
_Description: Number of pending connections allowed:

Template: clamav-daemon/LogSyslog
Type: boolean
Default: false
_Description: Do you want to use the system logger?
 It is possible to log the daemon activity to the system logger. This can be
 done independently of whether you want to log activity to a special file.

Template: clamav-daemon/LogFile
Type: string
Default: /var/log/clamav/clamav.log
_Description: Log file for clamav-daemon (enter none to disable):

Template: clamav-daemon/LogTime
Type: boolean
Default: true
_Description: Do you want to log time information with each message?

Template: clamav-daemon/LogRotate
Type: boolean
Default: true
_Description: Do you want to enable log rotation?

Template: clamav-daemon/ScanOnAccess
Type: boolean
Default: false
_Description: Do you want to enable on-access scanning?

Template: clamav-daemon/OnAccessMaxFileSize
Type: string
Default: 5M
_Description: Maximum file size to scan:
 A value of 0 disables the limit.

Template: clamav-daemon/AllowAllMatchScan
Type: boolean
Default: true
_Description: Do you want to permit the use of the ALLMATCHSCAN command?
 If set to no, clamd will reject any ALLMATCHSCAN command as invalid.

Template: clamav-daemon/ForceToDisk
Type: boolean
Default: false
_Description: Do you want memory or nested map scans to dump the content to disk?
 If you turn on this option, more data is written to disk and is available
 when the LeaveTemporaryFiles option is enabled.

Template: clamav-daemon/DisableCertCheck
Type: boolean
Default: false
_Description: Do you want to completely turn off authenticode verification?
 Certain PE files contain an authenticode signature. By default the signature
 chain in the PE file is checked against a database of trusted and
 revoked certificates if the file being scanned is marked as a virus.
 If any certificate in the chain validates against any trusted root, but
 does not match any revoked certificate, the file is marked as whitelisted.
 If the file does match a revoked certificate, the file is marked as virus.

Template: clamav-daemon/ScanSWF
Type: boolean
Default: true
_Description: Do you want to enable scanning within SWF files?
 If you turn off this option, the original files will still be scanned, but
 without decoding and additional processing.

Template: clamav-daemon/MaxEmbeddedPE
Type: string
Default: 10M
_Description: Maximum size of a file to check for embedded PE:
 Files larger than this value will skip the additional analysis step.
 Note: disabling this limit or setting it too high may result in severe damage
 to the system.

Template: clamav-daemon/MaxHTMLNormalize
Type: string
Default: 10M
_Description: Maximum size of a HTML file to normalize:
 HTML files larger than this value will not be normalized or scanned.
 Note: disabling this limit or setting it too high may result in severe damage
 to the system.

Template: clamav-daemon/MaxHTMLNoTags
Type: string
Default: 2M
_Description: Maximum size of a normalized HTML file to scan:
 HTML files larger than this value after normalization will not be scanned.
 Note: disabling this limit or setting it too high may result in severe damage
 to the system.

Template: clamav-daemon/MaxScriptNormalize
Type: string
Default: 5M
_Description: Maximum size of a script file to normalize:
 Script content larger than this value will not be normalized or scanned.
 Note: disabling this limit or setting it too high may result in severe damage
 to the system.

Template: clamav-daemon/MaxZipTypeRcg
Type: string
Default: 1M
_Description: Maximum size of a ZIP file to reanalyze type recognition:
 ZIP files larger than this value will skip the step to potentially reanalyze as PE.
 Note: disabling this limit or setting it too high may result in severe damage
 to the system.

Template: clamav-daemon/SelfCheck
Type: string
Default: 3600
_Description: Delay in seconds between daemon self checks:
 During the SelfCheck the daemon checks if it needs to reload the virus
 database. It also tries to repair problems caused by bugs in the daemon,
 (that is, in some cases it's able to repair broken data structures).

Template: clamav-daemon/User
Type: string
Default: clamav
_Description: User to run clamav-daemon as:
 It is recommended to run the ClamAV programs as a non-privileged user.
 This will work with most MTAs with a little tweaking, but if you want to
 use clamd for filesystem scans, running as root is probably unavoidable.
 Please see README.Debian in the clamav-base package for details.

Template: clamav-daemon/AddGroups
Type: string
_Description: Groups for clamav-daemon (space-separated):
 Please enter any extra groups for clamd.
 .
 By default, clamd runs as a non-privileged user. If you need clamd to
 be able to access files owned by another user (e.g., in combination with
 an MTA), then you will need to add clamd to the group for that piece of
 software. Please see README.Debian in the clamav-base package for details.

Template: clamav-daemon/Bytecode
Type: boolean
Default: true
_Description: Do you want to load bytecode from the database?

Template: clamav-daemon/BytecodeSecurity
Type: select
__Choices: TrustSigned, Paranoid
Default: TrustSigned
_Description: Security level to apply to the bytecode:
 .
  - TrustSigned : trust bytecode loaded from signed virus database files,
                  but insert runtime safety checks for bytecode loaded
                  from unsigned sources
  - Paranoid    : always insert runtime checks

Template: clamav-daemon/BytecodeTimeout
Type: string
Default: 60000
_Description: Bytecode execution timeout in milliseconds: