记~Linux 下安装杀毒软件 clamav

公司等保测评要求对linux服务器安装杀毒软件
找了一圈，最终选择免费、安装简易的杀毒软件clamav，选择的版本是0.104.2。

---

---

一、下载

官网下载地址：clamav官方下载

上传到服务器后，执行命令：

rpm -ivh --prefix=/usr/local/clamav clamav-0.104.2.linux.x86_64.rpm

二、配置

1.添加用户组和组成员

groupadd clamav
useradd -g clamav clamav

2.创建日志目录和病毒库目录

mkdir -p /usr/local/clamav/logs
mkdir -p /usr/local/clamav/update

3.创建日志文件

touch /usr/local/clamav/logs/clamd.log
touch /usr/local/clamav/logs/freshclam.log

4.文件授权

chown clamav:clamav /usr/local/clamav/logs/clamd.log
chown clamav:clamav /usr/local/clamav/logs/freshclam.log
chown clamav:clamav /usr/local/clamav/update

5.修改配置文件

cp /usr/local/clamav/etc/clamd.conf.sample /usr/local/clamav/etc/clamd.conf
cp /usr/local/clamav/etc/freshclam.conf.sample /usr/local/clamav/etc/freshclam.conf

6.vim clamd.conf配置文件

vim /usr/local/clamav/etc/clamd.conf

如下：

#Example　　//注释掉这一行
#添加以下内容
LogFile /usr/local/clamav/logs/clamd.log
PidFile /usr/local/clamav/update/clamd.pid
DatabaseDirectory /usr/local/clamav/update

7.vim freshclam.conf 配置文件

vim /usr/local/clamav/etc/freshclam.conf

如下：

#Example　　//注释掉这一行
#添加以下内容
DatabaseDirectory /usr/local/clamav/update
UpdateLogFile /usr/local/clamav/logs/freshclam.log
PidFile /usr/local/clamav/update/freshclam.pid

8.将这两个文件复制一下：

cp /usr/local/clamav/etc/*.conf /usr/local/etc/

三、使用

1.下载病毒库文件并上传到目录

上传到这个 /usr/local/share/clamav/目录下

mkdir -p /usr/local/share/clamav

main.cvd
bytecode.cvd
将这2个文件上传到/usr/local/share/clamav/下

2.配置库文件路径

vim /etc/ld.so.conf

在最后一行添加：

/usr/local/clamav/lib64

更新和生效配置文件：

ldconfig

3.创建命令软件链接

ln -s /usr/local/clamav/bin/clamscan /usr/local/bin/clamscan

4.运行使用

clamscan -r

成功即显示如下：

5.卸载

rpm remove clamav

---

四、可能出现的报错

执行clamscan -r 报错：
GLIBC_2.14’ not found、GLIBC_2.17not found、GLIBC_2.14 not found

clamscan: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by clamscan)
clamscan: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /usr/local/clamav/lib64/libclamav.so.9)
clamscan: /lib64/libc.so.6: version `GLIBC_2.17' not found (required by /usr/local/clamav/lib64/libclamav.so.9)
clamscan: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /usr/local/clamav/lib64/libclammspack.so.0)

原因：glibc 版本太低，升级到2.17即可

wget http://ftp.gnu.org/gnu/glibc/glibc-2.17.tar.gz
tar -xvf glibc-2.17.tar.gz
cd glibc-2.17
mkdir build; cd build
../configure --prefix=/usr --disable-profile --enable-add-ons --with-headers=/usr/include --with-binutils=/usr/bin
make -j 8
make install

查看版本：

ldd --version

显示升级到2.17

ldd (GNU libc) 2.17