centos7.9安装clamav并使用定时任务扫描

大新新大浩浩

于 2024-08-13 17:16:04 发布

阅读量66

点赞数 1

分类专栏：等保建设记录文章标签：运维安全

本文链接：https://blog.csdn.net/baidu_35848778/article/details/141168847

版权

等保建设记录专栏收录该内容

4 篇文章 0 订阅

订阅专栏

文章目录

前言
一、更换阿里源
二、安装服务
三、配置定时任务

前言

记录一下centos7.9安装clamav。
操作系统版本：CentOS Linux release 7.9.2009 (Core)
clamav版本：clamav-0.103.11-1.el7.x86_64
内核版本：kernel-3.10.0-1160.el7.x86_64

一、更换阿里源

mkdir -p /etc/yum.repos.d/CentOS-Base.repo.backup
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo
yum makecache
wget -O /etc/yum.repos.d/epel-7.repo http://mirrors.aliyun.com/repo/epel-7.repo
yum -y install epel-release

二、安装服务

sudo yum clean all
sudo yum -y install clamav-server clamav-data clamav-update clamav-filesystem clamav clamav-scanner-systemd clamav-devel clamav-lib clamav-server-systemd
# 手动更新病毒库
freshclam
# 打开配置项
sed -i 's/#LocalSocket/ LocalSocket/g' /etc/clamd.d/scan.conf
# 设置服务自启动
systemctl enable clamd@scan
systemctl restart  clamd@scan.service
systemctl status  clamd@scan
# 创建定时任务所需文件及文件夹
touch /var/log/clamscan.log
mkdir -p /var/log/Audit-log/old-log-clamscan

三、配置定时任务

# 配置定时任务
crontab -l
1  3  * * *  /usr/bin/freshclam --quiet
20 3  * * *  /usr/bin/clamscan  -r /  --remove -l /var/log/clamscan.log

增加日志切割文件/etc/logrotate.d/clamav

/var/log/clamscan.log
{
        daily
        dateext
        rotate 30
        create 640 root root
        olddir /var/log/Audit-log/old-log-clamscan
        notifempty
        missingok
}