From 7efe67daafdc6b3ab5bdd55bf214f0be2394dfe8 Mon Sep 17 00:00:00 2001
From: "andre.peters" <andre.peters@servercow.de>
Date: Wed, 24 Jan 2018 08:36:56 +0100
Subject: [PATCH] [ClamAV] Mount ClamAV config files

---
 data/conf/clamav/clamd.conf     | 47 +++++++++++++++++++++++++++++++++
 data/conf/clamav/freshclam.conf | 17 ++++++++++++
 2 files changed, 64 insertions(+)
 create mode 100644 data/conf/clamav/clamd.conf
 create mode 100644 data/conf/clamav/freshclam.conf

diff --git a/data/conf/clamav/clamd.conf b/data/conf/clamav/clamd.conf
new file mode 100644
index 000000000..362ae5a52
--- /dev/null
+++ b/data/conf/clamav/clamd.conf
@@ -0,0 +1,47 @@
+LogFile /tmp/logpipe_clamd
+LogTime yes
+LogClean yes
+ExtendedDetectionInfo yes
+PidFile /run/clamav/clamd.pid
+OfficialDatabaseOnly no
+LocalSocket /run/clamav/clamd.sock
+TCPSocket 3310
+StreamMaxLength 25M
+MaxThreads 10
+ReadTimeout 10
+CommandReadTimeout 3
+SendBufTimeout 200
+MaxQueue 80
+IdleTimeout 20
+SelfCheck 3600
+User clamav
+AllowSupplementaryGroups yes
+Foreground yes
+DetectPUA yes
+# See https://github.com/vrtadmin/clamav-faq/blob/master/faq/faq-pua.md
+#ExcludePUA NetTool
+#ExcludePUA PWTool
+#IncludePUA Spy
+#IncludePUA Scanner
+#IncludePUA RAT
+AlgorithmicDetection yes
+ScanOLE2 yes
+OLE2BlockMacros yes
+ScanPDF yes
+ScanSWF yes
+ScanXMLDOCS yes
+ScanHWP3 yes
+ScanMail yes
+PhishingSignatures no
+PhishingScanURLs no
+HeuristicScanPrecedence yes
+ScanHTML yes
+ScanArchive yes
+MaxScanSize 50M
+MaxFileSize 25M
+MaxRecursion 5
+MaxFiles 200
+ScanOnAccess no
+Bytecode yes
+BytecodeSecurity TrustSigned
+BytecodeTimeout 1000
diff --git a/data/conf/clamav/freshclam.conf b/data/conf/clamav/freshclam.conf
new file mode 100644
index 000000000..382befbc2
--- /dev/null
+++ b/data/conf/clamav/freshclam.conf
@@ -0,0 +1,17 @@
+UpdateLogFile /tmp/logpipe_freshclam
+LogTime yes
+PidFile /run/clamav/freshclam.pid
+DatabaseOwner clamav
+AllowSupplementaryGroups yes
+DNSDatabaseInfo current.cvd.clamav.net
+DatabaseMirror database.clamav.net
+MaxAttempts 4
+ScriptedUpdates yes
+Checks 6
+NotifyClamd /etc/clamav/clamd.conf
+Foreground yes
+ConnectTimeout 20
+ReceiveTimeout 20
+TestDatabases yes
+Bytecode yes
+