416 lines
9.3 KiB
Bash
Executable File
416 lines
9.3 KiB
Bash
Executable File
#! /bin/sh
|
|
# Written by Miquel van Smoorenburg <miquels@cistron.nl>.
|
|
# Modified for Debian GNU/Linux
|
|
# by Ian Murdock <imurdock@gnu.ai.mit.edu>.
|
|
# Clamav version by Magnus Ekdahl <magnus@debian.org>
|
|
# Heavily reworked by Stephen Gran <sgran@debian.org>
|
|
#
|
|
### BEGIN INIT INFO
|
|
# Provides: clamav-daemon
|
|
# Required-Start: $remote_fs $syslog
|
|
# Should-Start:
|
|
# Required-Stop: $remote_fs $syslog
|
|
# Should-Stop:
|
|
# Default-Start: 2 3 4 5
|
|
# Default-Stop: 0 1 6
|
|
# Short-Description: ClamAV daemon
|
|
# Description: Clam AntiVirus userspace daemon
|
|
### END INIT INFO
|
|
|
|
# The exit status codes should comply with LSB.
|
|
# https://refspecs.linuxfoundation.org/LSB_4.1.0/LSB-Core-generic/LSB-Core-generic/iniscrptact.html
|
|
|
|
PATH=/sbin:/bin:/usr/sbin:/usr/bin
|
|
DAEMON=/usr/sbin/clamd
|
|
NAME="clamd"
|
|
DESC="ClamAV daemon"
|
|
CLAMAVCONF=/etc/clamav/clamd.conf
|
|
SUPERVISOR=/usr/bin/daemon
|
|
SUPERVISORNAME=daemon
|
|
SUPERVISORPIDFILE="/var/run/clamav/daemon-clamd.pid"
|
|
SUPERVISORARGS="--name=$NAME --respawn $DAEMON -F $SUPERVISORPIDFILE"
|
|
DATABASEDIR="/var/lib/clamav"
|
|
|
|
# required by Debian policy 9.3.2
|
|
[ -x "$DAEMON" ] || exit 0
|
|
[ -r /etc/default/clamav-daemon ] && . /etc/default/clamav-daemon
|
|
|
|
to_lower()
|
|
{
|
|
word="$1"
|
|
lcword=$(echo "$word" | tr A-Z a-z)
|
|
echo "$lcword"
|
|
}
|
|
|
|
is_true()
|
|
{
|
|
var="$1"
|
|
lcvar=$(to_lower "$var")
|
|
[ 'true' = "$lcvar" ] || [ 'yes' = "$lcvar" ] || [ 1 = "$lcvar" ]
|
|
return $?
|
|
}
|
|
|
|
is_false()
|
|
{
|
|
var="$1"
|
|
lcvar=$(to_lower "$var")
|
|
[ 'false' = "$lcvar" ] || [ 'no' = "$lcvar" ] || [ 0 = "$lcvar" ]
|
|
return $?
|
|
}
|
|
|
|
ucf_cleanup()
|
|
{
|
|
# This only does something if I've fucked up before
|
|
# Not entirely impossible :(
|
|
|
|
configfile=$1
|
|
|
|
if [ `grep "$configfile" /var/lib/ucf/hashfile | wc -l` -gt 1 ]; then
|
|
grep -v "$configfile" /var/lib/ucf/hashfile > /var/lib/ucf/hashfile.tmp
|
|
grep "$configfile" /var/lib/ucf/hashfile | tail -n 1 >> /var/lib/ucf/hashfile.tmp
|
|
mv /var/lib/ucf/hashfile.tmp /var/lib/ucf/hashfile
|
|
fi
|
|
}
|
|
|
|
add_to_ucf()
|
|
{
|
|
configfile=$1
|
|
ucffile=$2
|
|
|
|
if ! grep -q "$configfile" /var/lib/ucf/hashfile; then
|
|
md5sum $configfile >> /var/lib/ucf/hashfile
|
|
cp $configfile $ucffile
|
|
fi
|
|
}
|
|
|
|
ucf_upgrade_check()
|
|
{
|
|
configfile=$1
|
|
sourcefile=$2
|
|
ucffile=$3
|
|
|
|
if [ -f "$configfile" ]; then
|
|
add_to_ucf $configfile $ucffile
|
|
ucf --three-way --debconf-ok "$sourcefile" "$configfile"
|
|
else
|
|
[ -d /var/lib/ucf/cache ] || mkdir -p /var/lib/ucf/cache
|
|
pathfind restorecon && restorecon /var/lib/ucf/cache
|
|
cp $sourcefile $configfile
|
|
add_to_ucf $configfile $ucffile
|
|
fi
|
|
}
|
|
|
|
slurp_config()
|
|
{
|
|
CLAMAVCONF="$1"
|
|
|
|
if [ -e "$CLAMAVCONF" ]; then
|
|
for variable in `egrep -a -v '^[[:space:]]*(#|$)' "$CLAMAVCONF" | awk '{print $1}'`; do
|
|
case "$variable" in
|
|
DatabaseMirror)
|
|
if [ -z "$DatabaseMirror" ]; then
|
|
for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do
|
|
value="$value $i"
|
|
done
|
|
else
|
|
continue
|
|
fi
|
|
;;
|
|
DatabaseCustomURL)
|
|
if [ -z "$DatabaseCustomURL" ]; then
|
|
for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do
|
|
value="$value $i"
|
|
done
|
|
else
|
|
continue
|
|
fi
|
|
;;
|
|
IncludePUA)
|
|
if [ -z "$IncludePUA" ]; then
|
|
for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do
|
|
value="$i $value"
|
|
done
|
|
else
|
|
continue
|
|
fi
|
|
;;
|
|
ExcludePUA)
|
|
if [ -z "$ExcludePUA" ]; then
|
|
for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do
|
|
value="$i $value"
|
|
done
|
|
else
|
|
continue
|
|
fi
|
|
;;
|
|
ExtraDatabase)
|
|
if [ -z "$ExtraDatabase" ]; then
|
|
for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do
|
|
value="$value $i"
|
|
done
|
|
else
|
|
continue
|
|
fi
|
|
;;
|
|
VirusEvent|OnUpdateExecute|OnErrorExecute|RejectMsg)
|
|
value=`grep -a ^$variable $CLAMAVCONF | head -n1 | sed -e s/$variable\ //`
|
|
;;
|
|
*)
|
|
value=`grep -a "^$variable[[:space:]]" $CLAMAVCONF | head -n1 | awk '{print $2}'`
|
|
;;
|
|
esac
|
|
if [ -z "$value" ]; then
|
|
export "$variable"="true"
|
|
elif [ "$value" != "$variable" ]; then
|
|
export "$variable"="$value"
|
|
else
|
|
export "$variable"="true"
|
|
fi
|
|
unset value
|
|
done
|
|
fi
|
|
}
|
|
|
|
pathfind() {
|
|
OLDIFS="$IFS"
|
|
IFS=:
|
|
for p in $PATH; do
|
|
if [ -x "$p/$*" ]; then
|
|
IFS="$OLDIFS"
|
|
return 0
|
|
fi
|
|
done
|
|
IFS="$OLDIFS"
|
|
return 1
|
|
}
|
|
|
|
set_debconf_value()
|
|
{
|
|
prog=$1
|
|
name=$2
|
|
eval variable="\$${name}"
|
|
if [ -n "$variable" ]; then
|
|
db_set clamav-$prog/$name "$variable" || true
|
|
fi
|
|
}
|
|
|
|
make_dir()
|
|
{
|
|
DIR=$1
|
|
if [ -d "$DIR" ]; then
|
|
return 0;
|
|
fi
|
|
[ -n "$User" ] || User=clamav
|
|
mkdir -p -m 0755 "$DIR"
|
|
chown "$User" "$DIR"
|
|
pathfind restorecon && restorecon "$DIR"
|
|
}
|
|
|
|
# Debconf Functions
|
|
|
|
isdigit ()
|
|
{
|
|
case $1 in
|
|
[[:digit:]]*)
|
|
ISDIGIT=1
|
|
;;
|
|
*)
|
|
ISDIGIT=0
|
|
;;
|
|
esac
|
|
}
|
|
|
|
inputdigit ()
|
|
{
|
|
ISDIGIT=0
|
|
while [ "$ISDIGIT" = '0' ]; do
|
|
db_input "$1" "$2" || true
|
|
if ! db_go; then
|
|
return 30
|
|
fi
|
|
db_get $2 || true
|
|
isdigit $RET
|
|
if [ "$ISDIGIT" = '0' ]; then
|
|
db_input critical clamav-base/numinfo || true
|
|
db_go
|
|
fi
|
|
done
|
|
return 0
|
|
}
|
|
|
|
StateGeneric()
|
|
{
|
|
PRIO=$1
|
|
QUESTION=$2
|
|
NEXT=$3
|
|
LAST=$4
|
|
|
|
db_input $PRIO $QUESTION || true
|
|
if db_go; then
|
|
STATE=$NEXT
|
|
else
|
|
STATE=$LAST
|
|
fi
|
|
}
|
|
|
|
StateGenericDigit()
|
|
{
|
|
PRIO=$1
|
|
QUESTION=$2
|
|
NEXT=$3
|
|
LAST=$4
|
|
|
|
inputdigit $PRIO $QUESTION || true
|
|
if db_go; then
|
|
STATE=$NEXT
|
|
else
|
|
STATE=$LAST
|
|
fi
|
|
}
|
|
|
|
|
|
. /lib/lsb/init-functions
|
|
|
|
if [ ! -f "$CLAMAVCONF" ]; then
|
|
log_failure_msg "There is no configuration file for Clamav."
|
|
log_failure_msg "Please either dpkg-reconfigure $DESC, or copy the example from"
|
|
log_failure_msg "/usr/share/doc/clamav-base/examples/ to $CLAMAVCONF and run"
|
|
log_failure_msg "'invoke-rc.d clamav-daemon start'"
|
|
if [ "$1" = "status" ]; then
|
|
# program or service status is unknown
|
|
exit 4;
|
|
else
|
|
# program is not configured
|
|
exit 6;
|
|
fi
|
|
fi
|
|
|
|
slurp_config "$CLAMAVCONF"
|
|
|
|
if [ -n "$Example" ]; then
|
|
log_failure_msg "Clamav is not configured."
|
|
log_failure_msg "Please edit $CLAMAVCONF and run 'invoke-rc.d clamav-daemon start'"
|
|
if [ "$1" = "status" ]; then
|
|
# program or service status is unknown
|
|
exit 4;
|
|
else
|
|
# program is not configured
|
|
exit 6;
|
|
fi
|
|
fi
|
|
|
|
if is_true "$Foreground"; then
|
|
if [ ! -x "$SUPERVISOR" ] ; then
|
|
log_failure_msg "Foreground specified, but $SUPERVISORNAME not found"
|
|
if [ "$1" = "status" ]; then
|
|
# program or service status is unknown
|
|
exit 4;
|
|
else
|
|
# program is not configured correctly
|
|
exit 6;
|
|
fi
|
|
else
|
|
RUN_SUPERVISED=1
|
|
fi
|
|
fi
|
|
|
|
[ -n "$User" ] || User=clamav
|
|
[ -n "$DataBaseDirectory" ] || DataBaseDirectory=/var/run/clamav
|
|
|
|
make_dir "$DataBaseDirectory"
|
|
make_dir $(dirname "$SUPERVISORPIDFILE")
|
|
|
|
if [ -z "$RUN_SUPERVISED" ]; then
|
|
THEPIDFILE="$PidFile"
|
|
THEDAEMON="$NAME"
|
|
RELOAD="1"
|
|
else
|
|
THEPIDFILE="$SUPERVISORPIDFILE"
|
|
THEDAEMON="$SUPERVISORNAME"
|
|
RELOAD="0"
|
|
fi
|
|
|
|
if [ -z "$THEPIDFILE" ]
|
|
then
|
|
# Set the default PidFile.
|
|
THEPIDFILE='/run/clamav/clamd.pid'
|
|
fi
|
|
|
|
make_dir $(dirname "$THEPIDFILE")
|
|
chown $User $(dirname "$THEPIDFILE")
|
|
|
|
|
|
case "$1" in
|
|
start)
|
|
# Check for database existence (start will fail if it's missing)
|
|
for db in main daily; do
|
|
if [ ! -e "$DATABASEDIR"/"$db".cvd ] && [ ! -d "$DATABASEDIR"/"$db".inc ] && [ ! -e "$DATABASEDIR"/"$db".cld ]; then
|
|
log_failure_msg "Clamav signatures not found in $DATABASEDIR"
|
|
log_failure_msg "Please retrieve them using freshclam"
|
|
log_failure_msg "Then run 'invoke-rc.d clamav-daemon start'"
|
|
# this is expected on a fresh installation
|
|
exit 0
|
|
fi
|
|
done
|
|
if [ -z "$RUN_SUPERVISED" ] ; then
|
|
log_daemon_msg "Starting $DESC" "$NAME "
|
|
start-stop-daemon --start --oknodo -c $User --exec $DAEMON --pidfile $THEPIDFILE --quiet -- -c $CLAMAVCONF --pid=$THEPIDFILE
|
|
ret=$?
|
|
else
|
|
log_daemon_msg "Starting $DESC" "$NAME (supervised) "
|
|
$SUPERVISOR $SUPERVISORARGS
|
|
ret=$?
|
|
fi
|
|
log_end_msg $ret
|
|
;;
|
|
stop)
|
|
log_daemon_msg "Stopping $DESC" "$NAME"
|
|
start-stop-daemon --stop --oknodo --name $THEDAEMON --pidfile $THEPIDFILE --quiet --retry TERM/30/KILL/5
|
|
log_end_msg $?
|
|
;;
|
|
status)
|
|
start-stop-daemon --status --name $THEDAEMON --pidfile $THEPIDFILE
|
|
# start-stop-daemon returns LSB compliant exit status codes
|
|
ret=$?
|
|
if [ "$ret" = 0 ]; then
|
|
log_success_msg "$NAME is running"
|
|
else
|
|
log_failure_msg "$NAME is not running"
|
|
exit "$ret"
|
|
fi
|
|
;;
|
|
restart|force-reload)
|
|
$0 stop
|
|
$0 start
|
|
;;
|
|
reload-database)
|
|
if [ "$RELOAD" = "1" ]; then
|
|
log_daemon_msg "Reloading database for $DESC" "$NAME"
|
|
pkill -USR2 -F $THEPIDFILE $THEDAEMON 2>/dev/null
|
|
log_end_msg $?
|
|
else
|
|
log_failure_msg "reload-database does not work in supervised mode."
|
|
# unimplemented feature
|
|
exit 3
|
|
fi
|
|
;;
|
|
reload-log)
|
|
if [ "$RELOAD" = "1" ]; then
|
|
log_daemon_msg "Reloading log file for $DESC" "$NAME"
|
|
pkill -HUP -F $THEPIDFILE $THEDAEMON 2>/dev/null
|
|
else
|
|
log_failure_msg "reload-log does not work in supervised mode."
|
|
# unimplemented feature
|
|
exit 3
|
|
fi
|
|
log_end_msg $?
|
|
;;
|
|
*)
|
|
log_action_msg "Usage: $0 {start|stop|restart|force-reload|reload-log|reload-database|status}" >&2
|
|
# invalid arguments
|
|
exit 2
|
|
;;
|
|
esac
|
|
|
|
exit 0
|