Sophos Antivirus for Linux

Depending on your needs and paranoia, you may want to install an antivirus client on Linux.  Sophos has a nice client but their installation documentation was a bit sparse.  Here are some helper notes for RHEL 6.5:

1. Upload the sav-linux-##-i386.tgz file to your Linux server
2. cd /tmp
3. tar -xzvf /PATH/TO/YOUR/sav-linux-##-i386.tgz
4. sudo yum -y install /lib/ld-linux.so.2 gcc make kernel-devel-`uname -r`
5. sudo sophos-av/install.sh
6. sudo /opt/sophos-av/bin/savupdate
7. sudo /opt/sophos-av/bin/savconfig set EnableOnStart true
8. sudo /opt/sophos-av/bin/savconfig set AutomaticAction disinfect
9. sudo /opt/sophos-av/bin/savconfig add AutomaticAction delete
10. sudo /opt/sophos-av/bin/savdctl enable
11. Test to make sure it is working by running this command: curl -o /tmp/eicar.com.txt http://www.eicar.org/download/eicar.com.txt ; cat /tmp/eicar.com.txt   (you should get a warning stating 'Threat "EICAR-AV-Test" detected in file' -- hit enter to acknowledge)

Note: if you use your own update source and have a secondary URL:

a. sudo /opt/sophos-av/bin/savsetup

b. Choose option 1  (Auto-updating configuration)

c. Choose option 5  (Configure secondary update source From own server)

d. When prompted, enter the URL

e. Choose option q  (Quit)

_________

Resources:

• http://www.sophos.com/en-us/medialibrary/PDFs/documentation/savl_9_cgeng.pdf