Sophos Antivirus for Linux

Depending on your needs and paranoia, you may want to install an antivirus client on Linux.  Sophos has a nice client but their installation documentation was a bit sparse.  Here are some helper notes for RHEL 6.5:

  1. Upload the sav-linux-##-i386.tgz file to your Linux server
  2. cd /tmp
  3. tar -xzvf /PATH/TO/YOUR/sav-linux-##-i386.tgz
  4. sudo yum -y install /lib/ld-linux.so.2 gcc make kernel-devel-`uname -r`
  5. sudo sophos-av/install.sh
  6. sudo /opt/sophos-av/bin/savupdate
  7. sudo /opt/sophos-av/bin/savconfig set EnableOnStart true
  8. sudo /opt/sophos-av/bin/savconfig set AutomaticAction disinfect
  9. sudo /opt/sophos-av/bin/savconfig add AutomaticAction delete
  10. sudo /opt/sophos-av/bin/savdctl enable
  11. Test to make sure it is working by running this command: curl -o /tmp/eicar.com.txt http://www.eicar.org/download/eicar.com.txt ; cat /tmp/eicar.com.txt   (you should get a warning stating 'Threat "EICAR-AV-Test" detected in file' -- hit enter to acknowledge)

Note: if you use your own update source and have a secondary URL:
a. sudo /opt/sophos-av/bin/savsetup
b. Choose option 1  (Auto-updating configuration)
c. Choose option 5  (Configure secondary update source From own server)
d. When prompted, enter the URL
e. Choose option q  (Quit)

_________

Resources:



0 comments:

Post a Comment

Keep it clean and professional...