This how to will help you with your install and configuration of ClamAV on your CentOS 7 server. For those of you who didn’t know, ClamAV is an open source (GPL) antivirus engine designed for detecting viruses, malware and other malicious threats on Linux. It’s easy to use and best for Linux based Web & Mail server.
This article assumes you have at least basic knowledge of linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple. I will show you through the step by step installation ClamAV on CentOS 7 server.
Install ClamAV on CentOS 7
Step 1. First add EPEL repository your system.
1 2 | yuminstallepel-release yumupdate |
Step 2. Install ClamAV.
Install required ClamAV packages:
1 | yuminstallclamav-serverclamav-dataclamav-updateclamav-filesystemclamavclamav-scanner-systemdclamav-develclamav-libclamav-server-systemd |
Step 3. Configuration of Clam daemon.
Copy a the clamd.conf template, in case you don’t have a configuration file yet:
1 2 | cp/usr/share/clamav/template/clamd.conf/etc/clamd.d/clamd.conf sed-i‘/^Example/d’/etc/clamd.d/clamd.conf |
Step 4. Configure SELinux for ClamAV.
You had to write this command to get it working with SELinux:
1 | setsebool-Pantivirus_can_scan_system1 |
Step 4. Enable Freshclam.
For those of you who didn’t know, Freshclam helps with keeping the database of ClamAV up-to-date. First delete the related “Example” line from /etc/freshclam.conf:
1 2 | cp/etc/freshclam.conf/etc/freshclam.conf.bak sed-i‘/^Example/d’/etc/freshclam.conf |
We creating a quick file here. The process should be forking itself and start freshclam in daemon mode. In this case we configure it to check 4 times a day for new files:
1 | nano/usr/lib/systemd/system/clam-freshclam.service |
Add following piece:
1 2 3 4 5 6 7 8 9 10 11 12 13 | # Run the freshclam as daemon [Unit] Description=freshclamscanner After=network.target [Service] Type=forking ExecStart=/usr/bin/freshclam-d-c4 Restart=on-failure PrivateTmp=true [Install] WantedBy=multi-user.target |
Now enable and start the service:
1 2 | systemctlenableclam-freshclam.service systemctlstartclam-freshclam.service |
Next, rename the /usr/lib/systemd/system/clamd@.service file:
1 | mv/usr/lib/systemd/system/clamd@.service/usr/lib/systemd/system/clamd.service |
Now we have to change the clamd@scan service as well, as it refers to a non-existing file now. Change this line in /usr/lib/systemd/system/clamd@scan.service and remove the @ sign:
1 | .include/lib/systemd/system/clamd@.service |
Next step is changing the clamd service file /usr/lib/systemd/system/clamd.service:
1 2 3 4 5 6 7 8 9 10 11 12 | [Unit] Description=clamdscannerdaemon After=syslog.targetnss-lookup.targetnetwork.target [Service] Type=simple ExecStart=/usr/sbin/clamd-c/etc/clamd.d/clamd.conf--nofork=yes Restart=on-failure PrivateTmp=true [Install] WantedBy=multi-user.target |
Move into the directory:
1 | cd/usr/lib/systemd/system |
Finally, start all services:
1 2 3 4 | systemctlenableclamd.service systemctlenableclamd@scan.service systemctlstartclamd.service systemctlstartclamd@scan.service. |
Congratulation’s! You have successfully installed ClamAV. Thanks for using this tutorial for installing ClamAV on CentOS 7 system. For additional help or useful information, we recommend you to check the official ClamAV web site.
