clamd.conf(5) Clam AntiVirus clamd.conf(5) (NAME) clamd.conf - ClamAV (DESCRIPTION) clamd.conf Clam AntiVirus clamd(8) . (FILE FORMAT) . (#) . Option Argument . : BOOL (yes/no true/false 1/0). STRING . SIZE . 'M' 'm' 'K' 'k' . . NUMBER . (DIRECTIVES) ( ) clamd . Example clamd . LogFile STRING . : disabled LogFileUnlock BOOL . . : no LogFileMaxSize SIZE . 0 . : 1048576 LogTime BOOL . : no LogClean BOOL . . : no LogSyslog BOOL ( LogFile ). : no LogFacility STRING syslog. facility 'man syslog' . : LOG_LOCAL6 LogVerbose BOOL . : no LogRotate BOOL . LogFileMaxSize . : no ExtendedDetectionInfo BOOL . : no PidFile STRING pid . : disabled TemporaryDirectory STRING . : ( /tmp /var/tmp). DatabaseDirectory STRING . clamd freshclam . : (/usr/local/share/clamav) CVDCertsDirectory STRING CA ClamAV ( CVD) . freshclam clamd clamscan sigtool . : /etc/clamav/certs FIPSCryptoHashLimits BOOL FIPS . FP MD5 SHA1 CVD '.sign' . : no OfficialDatabaseOnly BOOL ClamAV. : no FailIfCvdOlderThan NUMBER . : -1 LocalSocket STRING (Unix) . : disabled LocalSocketGroup STRING . : clamd LocalSocketMode STRING . : FixStaleSocket BOOL . : yes TCPSocket NUMBER TCP . : disabled TCPAddr STRING clamd INADDR_ANY . TCP . IP . IPv6 . : disabled EnableShutdownCommand BOOL SHUTDOWN. no clamd . clamd COMMAND UNAVAILABLE . : yes EnableReloadCommand BOOL RELOAD. no . clamd COMMAND UNAVAILABLE . : yes EnableVersionCommand BOOL VERSION. no . clamd COMMAND UNAVAILABLE . : yes EnableStatsCommand BOOL STATS. no . clamd COMMAND UNAVAILABLE . : yes MaxConnectionQueueLength NUMBER . : 200 StreamMaxLength SIZE STREAM . MTA . : 100M StreamMinPort NUMBER STREAM FTP . . : 1024 StreamMaxPort NUMBER . : 2048 MaxThreads NUMBER . : 10 ReadTimeout NUMBER ( ) clamd . : 120 CommandReadTimeout NUMBER ( ) clamd . 30 TCP . 5 . : ReadTimeout . : 30 SendBufTimeout NUMBER ( ) . clamd . : 500 MaxQueue NUMBER ( MaxThreads ). MaxThreads . : : MaxThreads*MaxRecursion + MaxQueue - MaxThreads + 6 < RLIMIT_NOFILE. RLIMIT_NOFILE ( 1024) ulimit -n . : 100 IdleTimeout NUMBER ( ) . : 30 ExcludePath REGEX REGEX . . : disabled MaxDirectoryRecursion NUMBER . : 15 FollowDirectorySymlinks BOOL . : no CrossFilesystems BOOL . : yes FollowFileSymlinks BOOL . : no SelfCheck NUMBER ( ) clamd . : 600 ConcurrentDatabaseReload BOOL (/) . . . . RAM RAM . : yes VirusEvent COMMAND . : - $CLAM_VIRUSEVENT_FILENAME - $CLAM_VIRUSEVENT_VIRUSNAME '%v' . : '%f' (command injection) . 'CLAM_VIRUSEVENT_FILENAME' . . : disabled ExitOnOOM BOOL libclamav (OOM) . : no AllowAllMatchScan BOOL ALLMATCHSCAN. : yes Foreground BOOL (fork) . : no Debug BOOL libclamav. : no LeaveTemporaryFiles BOOL ( ). : no GenerateMetadataJson BOOL . . Debug JSON . LeaveTemporaryFiles metadata.json . : no JsonStoreHTMLURIs BOOL URI html json. URI 'URIs' . GenerateMetadataJson . : yes ( GenerateMetadataJson) JsonStorePDFURIs BOOL URI pdf json. URI 'URIs' . GenerateMetadataJson . : yes ( GenerateMetadataJson) JsonStoreExtraHashes BOOL MD5 SHA1 ( SHA2-256) json. GenerateMetadataJson . : no User STRING ( root ). : disabled Bytecode BOOL ClamAV . . : yes BytecodeSecurity STRING . : TrustSigned - .c[lv]d Paranoid - . : TrustSigned .cvd . : TrustSigned BytecodeTimeout NUMBER . : 10000 BytecodeUnsigned BOOL .c[lv]d. ****: . . : no BytecodeMode STRING . : Auto - JIT ForceJIT - JIT ForceInterpreter - Test - JIT . . : Auto DetectPUA BOOL (PUA). : No ExcludePUA CATEGORY PUA. . PUA https://docs.clamav.net/faq/faq-pua.html . : disabled IncludePUA CATEGORY PUA. . PUA https://docs.clamav.net/faq/faq-pua.html . : disabled HeuristicAlerts BOOL ( ) ClamAV . . : yes HeuristicScanPrecedence BOOL . ( phishingScan) . . . / . "*.Heuristics.*" "" . ( ) . : no ScanPE BOOL PE Portable Executable - . ClamAV UPX . . : yes ScanELF BOOL Executable and Linking Format . ELF . . : yes ScanMail BOOL . . : yes ScanPartialMessages BOOL RFC1341 . $TemporaryDirectory/clamav-partial . : (DoS) . . : no PhishingSignatures BOOL . : yes PhishingScanURLs BOOL URL (Heuristics.Phishing.Email.*) : yes StructuredDataDetection BOOL DLP. : no StructuredMinCreditCardCount NUMBER . : 3 StructuredCCOnly BOOL DLP . . : No StructuredMinSSNCount NUMBER . : 3 StructuredSSNFormatNormal BOOL DLP xxx- yy-zzzz . : Yes StructuredSSNFormatStripped BOOL DLP xxxyyzzzz . : No ScanHTML BOOL HTML/JavaScript/ScriptEncoder. . : yes ScanOLE2 BOOL OLE2 Microsoft Office .msi . . : yes ScanPDF BOOL PDF . . : yes ScanSWF BOOL SWF . . : yes ScanXMLDOCS BOOL xml libclamav . . : yes ScanHWP3 BOOL HWP3 . . : yes ScanOneNote BOOL OneNote . . : yes ScanArchive BOOL . . : yes ScanImage BOOL () . . : yes ScanImageFuzzyHash BOOL () . . . : yes AlertBrokenExecutables BOOL (PE ELF). : no AlertBrokenMedia BOOL (JPEG, TIFF, PNG, GIF). : no AlertEncrypted BOOL ( .zip, .7zip, .rar, .pdf). : no AlertEncryptedArchive BOOL ( .zip, .7zip, .rar). : no AlertEncryptedDoc BOOL ( .pdf). : no AlertOLE2Macros BOOL OLE2 VBA (Heuristics.OLE2.ContainsMacros). : no AlertExceedsMax BOOL AlertExceedsMax MaxFileSize MaxScanSize MaxRecursion "Heuristics.Limits.Exceeded" . : no AlertPhishingSSLMismatch BOOL SSL ( !). : no AlertPhishingCloak BOOL ( ). : no AlertPartitionIntersection BOOL DMG . : no DisableCache () . MD5 . : . : no CacheSize . . : 65536 ForceToDisk . leave- temps . : no MaxScanTime SIZE . . 0 . : / . : 120000 MaxScanSize SIZE . . . . : . : 400M MaxFileSize SIZE . ( ) . : . ClamAV . : 100M MaxRecursion NUMBER Zip RAR . . : . : 17 MaxFiles NUMBER . : . : 10000 MaxEmbeddedPE SIZE PE . . . : 40M MaxHTMLNormalize SIZE HTML . HTML . . : 40M MaxHTMLNoTags SIZE HTML . HTML . . : 8M MaxScriptNormalize SIZE . . . : 20M MaxZipTypeRcg SIZE ZIP . ZIP PE . . : . : 1M MaxPartitions SIZE . . . : . : 50 MaxIconsPE SIZE PE . PE . . : . : 100 MaxRecHWP3 NUMBER HWP3 . HWP3 . HWP3 . . : . : 16 PCREMatchLimit NUMBER PCRE . . match_limit PCRE . . : . : 10000 PCRERecMatchLimit NUMBER PCRE . . match_limit_recursion PCRE . PCREMatchLimit . : . : 2000 PCREMaxFileSize SIZE PCRE . PCRE . . . : . : 100M OnAccessIncludePath STRING ( ) . . : disabled OnAccessExcludePath STRING . . : disabled OnAccessExcludeRootUID BOOL (UID 0) . . clamd uid ( OnAccessPrevention ) clamd . OnAccessExcludeRootUID ( OnAccessPrevention ). : no OnAccessExcludeUID NUMBER . UID . ( ) . : 0 . (0) OnAccessExcludeRootUID . clamd uid ( OnAccessPrevention ) clamd . OnAccessExcludeUID uid ( OnAccessPrevention ). : disabled OnAccessExcludeUname STRING . OnAccessExcludeUID . : disabled OnAccessMaxFileSize SIZE . : 5M OnAccessMaxThreads NUMBER OnAccess . . clamd clamonacc clamd . : 5 OnAccessCurlTimeout NUMBER ( ) OnAccess clamd curl . : 5000 ( ) OnAccessMountPath STRING ( ) . . : disabled OnAccessDisableDDD BOOL (DDD) . : no OnAccessPrevention BOOL fanotify . : disabled OnAccessRetryAttempts NUMBER OnAccess ( ) . : 0 OnAccessDenyOnError BOOL . . : no OnAccessExtraScanning BOOL . DDD . : no DisableCertCheck BOOL authenticode PE. : no (NOTES) 4GB . . (FILES) /etc/clamav/clamd.conf (AUTHORS) Tomasz Kojm , Kevin Lin (SEE ALSO) clamd(8), clamdscan(1), clamav-milter(8), freshclam(1), freshclam.conf(5) ClamAV 1.5.4 December 4, 2013 clamd.conf(5)