Server IP : 85.214.239.14 / Your IP : 3.22.68.29 Web Server : Apache/2.4.62 (Debian) System : Linux h2886529.stratoserver.net 4.9.0 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.18 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : OFF | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /proc/self/root/var/lib/dpkg/info/ |
Upload File : |
#! /bin/sh # postinst script for clamav-daemon # # see: dh_installdeb(1) set -e # summary of how this script can be called: # * <postinst> `configure' <most-recently-configured-version> # * <old-postinst> `abort-upgrade' <new version> # * <conflictor's-postinst> `abort-remove' `in-favour' <package> # <new-version> # * <deconfigured's-postinst> `abort-deconfigure' `in-favour' # <failed-install-package> <version> `removing' # <conflicting-package> <version> # for details, see http://www.debian.org/doc/debian-policy/ or # the debian-policy package # # quoting from the policy: # Any necessary prompting should almost always be confined to the # post-installation script, and should be protected with a conditional # so that unnecessary prompting doesn't happen if a package's # installation fails and the `postinst' is called with `abort-upgrade', # `abort-remove' or `abort-deconfigure'. #loading debconf module . /usr/share/debconf/confmodule to_lower() { word="$1" lcword=$(echo "$word" | tr A-Z a-z) echo "$lcword" } is_true() { var="$1" lcvar=$(to_lower "$var") [ 'true' = "$lcvar" ] || [ 'yes' = "$lcvar" ] || [ 1 = "$lcvar" ] return $? } is_false() { var="$1" lcvar=$(to_lower "$var") [ 'false' = "$lcvar" ] || [ 'no' = "$lcvar" ] || [ 0 = "$lcvar" ] return $? } ucf_cleanup() { # This only does something if I've fucked up before # Not entirely impossible :( configfile=$1 if [ `grep "$configfile" /var/lib/ucf/hashfile | wc -l` -gt 1 ]; then grep -v "$configfile" /var/lib/ucf/hashfile > /var/lib/ucf/hashfile.tmp grep "$configfile" /var/lib/ucf/hashfile | tail -n 1 >> /var/lib/ucf/hashfile.tmp mv /var/lib/ucf/hashfile.tmp /var/lib/ucf/hashfile fi } add_to_ucf() { configfile=$1 ucffile=$2 if ! grep -q "$configfile" /var/lib/ucf/hashfile; then md5sum $configfile >> /var/lib/ucf/hashfile cp $configfile $ucffile fi } ucf_upgrade_check() { configfile=$1 sourcefile=$2 ucffile=$3 if [ -f "$configfile" ]; then add_to_ucf $configfile $ucffile ucf --three-way --debconf-ok "$sourcefile" "$configfile" else [ -d /var/lib/ucf/cache ] || mkdir -p /var/lib/ucf/cache pathfind restorecon && restorecon /var/lib/ucf/cache cp $sourcefile $configfile add_to_ucf $configfile $ucffile fi } slurp_config() { CLAMAVCONF="$1" if [ -e "$CLAMAVCONF" ]; then for variable in `egrep -a -v '^[[:space:]]*(#|$)' "$CLAMAVCONF" | awk '{print $1}'`; do case "$variable" in DatabaseMirror) if [ -z "$DatabaseMirror" ]; then for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do value="$value $i" done else continue fi ;; DatabaseCustomURL) if [ -z "$DatabaseCustomURL" ]; then for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do value="$value $i" done else continue fi ;; IncludePUA) if [ -z "$IncludePUA" ]; then for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do value="$i $value" done else continue fi ;; ExcludePUA) if [ -z "$ExcludePUA" ]; then for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do value="$i $value" done else continue fi ;; ExtraDatabase) if [ -z "$ExtraDatabase" ]; then for i in `grep -a ^$variable $CLAMAVCONF | awk '{print $2}'`; do value="$value $i" done else continue fi ;; VirusEvent|OnUpdateExecute|OnErrorExecute|RejectMsg) value=`grep -a ^$variable $CLAMAVCONF | head -n1 | sed -e s/$variable\ //` ;; *) value=`grep -a "^$variable[[:space:]]" $CLAMAVCONF | head -n1 | awk '{print $2}'` ;; esac if [ -z "$value" ]; then export "$variable"="true" elif [ "$value" != "$variable" ]; then export "$variable"="$value" else export "$variable"="true" fi unset value done fi } pathfind() { OLDIFS="$IFS" IFS=: for p in $PATH; do if [ -x "$p/$*" ]; then IFS="$OLDIFS" return 0 fi done IFS="$OLDIFS" return 1 } set_debconf_value() { prog=$1 name=$2 eval variable="\$${name}" if [ -n "$variable" ]; then db_set clamav-$prog/$name "$variable" || true fi } make_dir() { DIR=$1 if [ -d "$DIR" ]; then return 0; fi [ -n "$User" ] || User=clamav mkdir -p -m 0755 "$DIR" chown "$User" "$DIR" pathfind restorecon && restorecon "$DIR" } # Debconf Functions isdigit () { case $1 in [[:digit:]]*) ISDIGIT=1 ;; *) ISDIGIT=0 ;; esac } inputdigit () { ISDIGIT=0 while [ "$ISDIGIT" = '0' ]; do db_input "$1" "$2" || true if ! db_go; then return 30 fi db_get $2 || true isdigit $RET if [ "$ISDIGIT" = '0' ]; then db_input critical clamav-base/numinfo || true db_go fi done return 0 } StateGeneric() { PRIO=$1 QUESTION=$2 NEXT=$3 LAST=$4 db_input $PRIO $QUESTION || true if db_go; then STATE=$NEXT else STATE=$LAST fi } StateGenericDigit() { PRIO=$1 QUESTION=$2 NEXT=$3 LAST=$4 inputdigit $PRIO $QUESTION || true if db_go; then STATE=$NEXT else STATE=$LAST fi } case "$1" in configure) # The DEB*FILE files are used temporarily during the update of the CLAMAV* files. DEBCONFFILE=/var/lib/clamav/clamav.conf CLAMAVCONF=/etc/clamav/clamd.conf DEBROTATEFILE=/var/lib/clamav/clamdrotate.debconf CLAMAVROTATEFILE=/etc/logrotate.d/clamav-daemon DEBSYSTEMDCLAMDCONF=/var/lib/clamav/extend.conf CLAMAVSYSTEMDCLAMDONF=/etc/systemd/system/clamav-daemon.service.d/extend.conf # Update the configuration file db_get clamav-daemon/debconf || true if [ "$RET" = "true" ]; then # Handle the configuration via debconf # Read the configuration file slurp_config "$CLAMAVCONF" # Get the debconf configuration db_get clamav-daemon/User || true User="$RET" db_get clamav-daemon/AddGroups || true AddGroups="$RET" db_get clamav-daemon/TcpOrLocal || true if [ "$RET" = "TCP" ]; then sock="tcp" db_get clamav-daemon/TCPSocket || true TCPSocket="$RET" db_get clamav-daemon/TCPAddr TCPAddr="$RET" else sock="unix" db_get clamav-daemon/LocalSocket || true LocalSocket="$RET" db_get clamav-daemon/FixStaleSocket || true FixStaleSocket="$RET" db_get clamav-daemon/LocalSocketGroup || true LocalSocketGroup="$RET" db_get clamav-daemon/LocalSocketMode || true LocalSocketMode="$RET" fi db_get clamav-daemon/ScanMail || true ScanMail="$RET" db_get clamav-daemon/ScanArchive || true ScanArchive="$RET" db_get clamav-daemon/MaxDirectoryRecursion || true if [ "$RET" != "0" ]; then MaxDirectoryRecursion="$RET" db_get clamav-daemon/FollowDirectorySymlinks || true FollowDirectorySymlinks="$RET" else MaxDirectoryRecursion=15 FollowDirectorySymlinks=false fi db_get clamav-daemon/FollowFileSymlinks || true FollowFileSymlinks="$RET" db_get clamav-daemon/ThreadTimeout || true ThreadTimeout="$RET" db_get clamav-daemon/ReadTimeout || true ReadTimeout="$RET" [ -z "$ReadTimeout" ] && ReadTimeout="$ThreadTimeout" db_get clamav-daemon/MaxThreads || true MaxThreads="$RET" db_get clamav-daemon/MaxConnectionQueueLength || true MaxConnectionQueueLength="$RET" db_get clamav-daemon/StreamMaxLength || true StreamMaxLength="$RET" db_get clamav-daemon/LogSyslog || true LogSyslog="$RET" db_get clamav-daemon/LogFile || true if [ "$RET" != "" ]; then LogFile="$RET" db_get clamav-daemon/LogTime || true LogTime="$RET" fi db_get clamav-daemon/LogRotate || true LogRotate="$RET" db_get clamav-daemon/SelfCheck || true SelfCheck="$RET" db_get clamav-daemon/Bytecode || true Bytecode="$RET" if [ "$Bytecode" = "true" ]; then db_get clamav-daemon/BytecodeSecurity || true BytecodeSecurity="$RET" db_get clamav-daemon/BytecodeTimeout || true BytecodeTimeout="$RET" fi db_get clamav-daemon/OnAccessMaxFileSize || true OnAccessMaxFileSize="$RET" db_get clamav-daemon/AllowAllMatchScan || true AllowAllMatchScan="$RET" db_get clamav-daemon/ForceToDisk || true ForceToDisk="$RET" db_get clamav-daemon/DisableCertCheck || true DisableCertCheck="$RET" db_get clamav-daemon/ScanSWF || true ScanSWF="$RET" db_get clamav-daemon/MaxEmbeddedPE || true MaxEmbeddedPE="$RET" db_get clamav-daemon/MaxHTMLNormalize || true MaxHTMLNormalize="$RET" db_get clamav-daemon/MaxHTMLNoTags || true MaxHTMLNoTags="$RET" db_get clamav-daemon/MaxScriptNormalize || true MaxScriptNormalize="$RET" db_get clamav-daemon/MaxZipTypeRcg || true MaxZipTypeRcg="$RET" db_get clamav-daemon/BlockMax || RET="" BlockMax="$RET" # Set default values for options not configured via debconf [ -z "$LogFileUnlock" ] && LogFileUnlock=false [ -z "$LogFileMaxSize" ] && LogFileMaxSize=0 [ -z "$LogClean" ] && LogClean=false [ -z "$LogFacility" ] && LogFacility=LOG_LOCAL6 [ -z "$LogVerbose" ] && LogVerbose=false [ -z "$ExtendedDetectionInfo" ] && ExtendedDetectionInfo=true [ -z "$DatabaseDirectory" ] && DatabaseDirectory='/var/lib/clamav' [ -z "$OfficialDatabaseOnly" ] && OfficialDatabaseOnly=false [ -z "$CommandReadTimeout" ] && CommandReadTimeout=30 [ -z "$SendBufTimeout" ] && SendBufTimeout=200 [ -z "$MaxQueue" ] && MaxQueue=100 [ -z "$IdleTimeout" ] && IdleTimeout=30 [ -z "$CrossFilesystems" ] && CrossFilesystems=true [ -z "$ExitOnOOM" ] && ExitOnOOM=false [ -z "$Foreground" ] && Foreground=false [ -z "$Debug" ] && Debug=false [ -z "$LeaveTemporaryFiles" ] && LeaveTemporaryFiles=false [ -z "$DetectPUA" ] && DetectPUA=false [ -z "$AlgorithmicDetection" ] && AlgorithmicDetection=true [ -z "$DisableCache" ] && DisableCache=false [ -z "$ScanPE" ] && ScanPE=true [ -z "$ScanELF" ] && ScanELF=true [ -z "$ScanOLE2" ] && ScanOLE2=true [ -z "$OLE2BlockMacros" ] && OLE2BlockMacros=false [ -z "$OnAccessExcludeRootUID" ] && OnAccessExcludeRootUID=no [ -z "$ScanPDF" ] && ScanPDF=true [ -z "$ScanPartialMessages" ] && ScanPartialMessages=false [ -z "$PhishingSignatures" ] && PhishingSignatures=true [ -z "$PhishingScanURLs" ] && PhishingScanURLs=true [ -z "$PhishingAlwaysBlockSSLMismatch" ] && PhishingAlwaysBlockSSLMismatch=false [ -z "$PhishingAlwaysBlockCloak" ] && PhishingAlwaysBlockCloak=false [ -z "$PartitionIntersection" ] && PartitionIntersection=false [ -z "$HeuristicScanPrecedence" ] && HeuristicScanPrecedence=false [ -z "$StructuredDataDetection" ] && StructuredDataDetection=false [ -z "$ScanHTML" ] && ScanHTML=true [ -z "$ArchiveBlockEncrypted" ] && ArchiveBlockEncrypted=false [ -z "$MaxScanTime" ] && MaxScanTime=120000 [ -z "$MaxScanSize" ] && MaxScanSize=100M [ -z "$MaxFileSize" ] && MaxFileSize=25M [ -z "$MaxRecursion" ] && MaxRecursion=16 [ -z "$MaxFiles" ] && MaxFiles=10000 [ -z "$MaxPartitions" ] && MaxPartitions=50 [ -z "$MaxIconsPE" ] && MaxIconsPE=100 [ -z "$PCREMatchLimit" ] && PCREMatchLimit=10000 [ -z "$PCRERecMatchLimit" ] && PCRERecMatchLimit=5000 [ -z "$PCREMaxFileSize" ] && PCREMaxFileSize=25M [ -z "$ScanXMLDOCS" ] && ScanXMLDOCS=true [ -z "$ScanHWP3" ] && ScanHWP3=true [ -z "$MaxRecHWP3" ] && MaxRecHWP3=16 [ -z "$PreludeEnable" ] && PreludeEnable=no [ -z "$PreludeAnalyzerName" ] && PreludeAnalyzerName=ClamAV # Create the new configuration file echo "#Automatically Generated by clamav-daemon postinst" > $DEBCONFFILE echo "#To reconfigure clamd run #dpkg-reconfigure clamav-daemon" >> $DEBCONFFILE echo "#Please read /usr/share/doc/clamav-daemon/README.Debian.gz for details" >> $DEBCONFFILE echo "[Service]" > "$DEBSYSTEMDCLAMDCONF" echo "ExecStartPre=-/bin/mkdir -p /run/clamav" >> "$DEBSYSTEMDCLAMDCONF" echo "ExecStartPre=/bin/chown $User /run/clamav" >> "$DEBSYSTEMDCLAMDCONF" if [ "$sock" = "tcp" ]; then echo "TCPSocket $TCPSocket" >> $DEBCONFFILE if [ "$TCPAddr" != "any" ]; then echo "TCPAddr $TCPAddr" >> $DEBCONFFILE fi else echo "LocalSocket $LocalSocket" >> $DEBCONFFILE echo "FixStaleSocket $FixStaleSocket" >> $DEBCONFFILE echo "LocalSocketGroup $LocalSocketGroup" >> $DEBCONFFILE echo "LocalSocketMode $LocalSocketMode" >> $DEBCONFFILE fi # Finish the configuration file update, by applying changes to the real configuration file. mkdir -p `dirname $CLAMAVSYSTEMDCLAMDONF` 2>/dev/null || true ucf_cleanup "$CLAMAVSYSTEMDCLAMDONF" ucf_upgrade_check "$CLAMAVSYSTEMDCLAMDONF" "$DEBSYSTEMDCLAMDCONF" /var/lib/ucf/cache/:etc:systemd:system:clamav-daemon.service.d:extend.conf rm -f "$DEBSYSTEMDCLAMDCONF" if [ -e "$CLAMAVSYSTEMDCLAMDONF".dpkg-old ]; then echo "Removing old systemd service override options for clamav-daemon" rm -f "$CLAMAVSYSTEMDCLAMDONF".dpkg-old fi if [ -n "$TemporaryDirectory" ]; then cat >> $DEBCONFFILE << EOF TemporaryDirectory $TemporaryDirectory EOF else cat >> $DEBCONFFILE << EOF # TemporaryDirectory is not set to its default /tmp here to make overriding # the default with environment variables TMPDIR/TMP/TEMP possible EOF fi cat >> $DEBCONFFILE << EOF User $User ScanMail $ScanMail ScanArchive $ScanArchive ArchiveBlockEncrypted $ArchiveBlockEncrypted MaxDirectoryRecursion $MaxDirectoryRecursion FollowDirectorySymlinks $FollowDirectorySymlinks FollowFileSymlinks $FollowFileSymlinks ReadTimeout $ReadTimeout MaxThreads $MaxThreads MaxConnectionQueueLength $MaxConnectionQueueLength LogSyslog $LogSyslog LogRotate $LogRotate LogFacility $LogFacility LogClean $LogClean LogVerbose $LogVerbose PreludeEnable $PreludeEnable PreludeAnalyzerName $PreludeAnalyzerName DatabaseDirectory $DatabaseDirectory OfficialDatabaseOnly $OfficialDatabaseOnly SelfCheck $SelfCheck Foreground $Foreground Debug $Debug ScanPE $ScanPE MaxEmbeddedPE $MaxEmbeddedPE ScanOLE2 $ScanOLE2 ScanPDF $ScanPDF ScanHTML $ScanHTML MaxHTMLNormalize $MaxHTMLNormalize MaxHTMLNoTags $MaxHTMLNoTags MaxScriptNormalize $MaxScriptNormalize MaxZipTypeRcg $MaxZipTypeRcg ScanSWF $ScanSWF ExitOnOOM $ExitOnOOM LeaveTemporaryFiles $LeaveTemporaryFiles AlgorithmicDetection $AlgorithmicDetection ScanELF $ScanELF IdleTimeout $IdleTimeout CrossFilesystems $CrossFilesystems PhishingSignatures $PhishingSignatures PhishingScanURLs $PhishingScanURLs PhishingAlwaysBlockSSLMismatch $PhishingAlwaysBlockSSLMismatch PhishingAlwaysBlockCloak $PhishingAlwaysBlockCloak PartitionIntersection $PartitionIntersection DetectPUA $DetectPUA ScanPartialMessages $ScanPartialMessages HeuristicScanPrecedence $HeuristicScanPrecedence StructuredDataDetection $StructuredDataDetection CommandReadTimeout $CommandReadTimeout SendBufTimeout $SendBufTimeout MaxQueue $MaxQueue ExtendedDetectionInfo $ExtendedDetectionInfo OLE2BlockMacros $OLE2BlockMacros AllowAllMatchScan $AllowAllMatchScan ForceToDisk $ForceToDisk DisableCertCheck $DisableCertCheck DisableCache $DisableCache MaxScanTime $MaxScanTime MaxScanSize $MaxScanSize MaxFileSize $MaxFileSize MaxRecursion $MaxRecursion MaxFiles $MaxFiles MaxPartitions $MaxPartitions MaxIconsPE $MaxIconsPE PCREMatchLimit $PCREMatchLimit PCRERecMatchLimit $PCRERecMatchLimit PCREMaxFileSize $PCREMaxFileSize ScanXMLDOCS $ScanXMLDOCS ScanHWP3 $ScanHWP3 MaxRecHWP3 $MaxRecHWP3 EOF if is_true "$StructuredDataDetection"; then [ -z "$StructuredMinCreditCardCount" ] || StructuredMinCreditCardCount=3 [ -z "$StructuredMinSSNCount" ] || StructuredMinSSNCount=3 [ -z "$StructuredSSNFormatNormal" ] || StructuredSSNFormatNormal=true [ -z "$StructuredSSNFormatStripped" ] || StructuredSSNFormatStripped=false cat >> $DEBCONFFILE << EOF StructuredMinCreditCardCount $StructuredMinCreditCardCount StructuredMinSSNCount $StructuredMinSSNCount StructuredSSNFormatNormal $StructuredSSNFormatNormal StructuredSSNFormatStripped $StructuredSSNFormatStripped EOF fi if [ -n "$StreamMaxLength" ]; then if [ "$StreamMaxLength" -gt 0 ] ;then StreamMaxLength="${StreamMaxLength}M" fi echo "StreamMaxLength $StreamMaxLength" >> $DEBCONFFILE fi if [ -n "$IncludePUA" ]; then for i in $IncludePUA; do echo "IncludePUA $i" >> $DEBCONFFILE done fi if [ -n "$ExcludePUA" ]; then for e in $ExcludePUA; do echo "ExcludePUA $i" >> $DEBCONFFILE done fi if [ -n "$LogFile" ]; then echo "LogFile $LogFile" >> $DEBCONFFILE echo "LogTime $LogTime" >> $DEBCONFFILE echo "LogFileUnlock $LogFileUnlock" >> $DEBCONFFILE echo "LogFileMaxSize $LogFileMaxSize" >> $DEBCONFFILE fi echo "Bytecode $Bytecode" >> $DEBCONFFILE if is_true "$Bytecode"; then echo "BytecodeSecurity $BytecodeSecurity" >> $DEBCONFFILE echo "BytecodeTimeout $BytecodeTimeout" >> $DEBCONFFILE fi if [ -n "$BlockMax" ]; then echo "BlockMax $BlockMax" >> $DEBCONFFILE fi # Preserve manually created, usually not needed options. [ -n "$PidFile" ] && echo "PidFile $PidFile" >> $DEBCONFFILE [ -n "$ExcludePath" ] && echo "ExcludePath $ExcludePath" >> $DEBCONFFILE [ -n "$VirusEvent" ] && echo "VirusEvent $VirusEvent" >> $DEBCONFFILE [ -n "$StreamMinPort" ] && echo "StreamMinPort $StreamMinPort" >> $DEBCONFFILE [ -n "$StreamMaxPort" ] && echo "StreamMaxPort $StreamMaxPort" >> $DEBCONFFILE [ -n "$OnAccessMaxFileSize" ] && echo "OnAccessMaxFileSize $OnAccessMaxFileSize" >> $DEBCONFFILE [ -n "$OnAccessIncludePath" ] && echo "OnAccessIncludePath $OnAccessIncludePath" >> $DEBCONFFILE [ -n "$OnAccessExcludePath" ] && echo "OnAccessExcludePath $OnAccessExcludePath" >> $DEBCONFFILE [ -n "$OnAccessExcludeUID" ] && echo "OnAccessExcludeUID $OnAccessExcludeUID" >> $DEBCONFFILE [ -n "$OnAccessMountPath" ] && echo "OnAccessMountPath $OnAccessMountPath" >> $DEBCONFFILE [ -n "$OnAccessDisableDDD" ] && echo "OnAccessDisableDDD $OnAccessDisableDDD" >> $DEBCONFFILE [ -n "$OnAccessPrevention" ] && echo "OnAccessPrevention $OnAccessPrevention" >> $DEBCONFFILE [ -n "$OnAccessExtraScanning" ] && echo "OnAccessExtraScanning $OnAccessExtraScanning" >> $DEBCONFFILE [ -n "$OnAccessMaxThreads" ] && echo "OnAccessMaxThreads $OnAccessMaxThreads" >> $DEBCONFFILE [ -n "$OnAccessDenyOnError" ] && echo "OnAccessDenyOnError $OnAccessDenyOnError" >> $DEBCONFFILE [ -n "$OnAccessExcludeUname" ] && echo "OnAccessExcludeUname $OnAccessExcludeUname" >> $DEBCONFFILE [ -n "$OnAccessRetryAttempts" ] && echo "OnAccessRetryAttempts $OnAccessRetryAttempts" >> $DEBCONFFILE [ -n "$HeuristicAlerts" ] && echo "HeuristicAlerts $HeuristicAlerts" >> $DEBCONFFILE [ -n "$AlertBrokenExecutables" ] && echo "AlertBrokenExecutables $AlertBrokenExecutables" >> $DEBCONFFILE [ -n "$AlertEncrypted" ] && echo "AlertEncrypted $AlertEncrypted" >> $DEBCONFFILE [ -n "$AlertEncryptedArchive" ] && echo "AlertEncryptedArchive $AlertEncryptedArchive" >> $DEBCONFFILE [ -n "$AlertEncryptedDoc" ] && echo "AlertEncryptedDoc $AlertEncryptedDoc" >> $DEBCONFFILE [ -n "$AlertOLE2Macros" ] && echo "AlertOLE2Macros $AlertOLE2Macros" >> $DEBCONFFILE [ -n "$AlertPhishingSSLMismatch" ] && echo "AlertPhishingSSLMismatch $AlertPhishingSSLMismatch" >> $DEBCONFFILE [ -n "$AlertPhishingCloak" ] && echo "AlertPhishingCloak $AlertPhishingCloak" >> $DEBCONFFILE [ -n "$AlertPartitionIntersection" ] && echo "AlertPartitionIntersection $AlertPartitionIntersection" >> $DEBCONFFILE [ -n "$AlertExceedsMax" ] && echo "AlertExceedsMax $AlertExceedsMax" >> $DEBCONFFILE [ -n "$ConcurrentDatabaseReload" ] && echo "ConcurrentDatabaseReload $ConcurrentDatabaseReload" >> $DEBCONFFILE [ -n "$StructuredCCOnly" ] && echo "StructuredCCOnly $StructuredCCOnly" >> $DEBCONFFILE [ -n "$BytecodeUnsigned" ] && echo "BytecodeUnsigned $BytecodeUnsigned" >> $DEBCONFFILE [ -n "$AlertBrokenMedia" ] && echo "AlertBrokenMedia $AlertBrokenMedia" >> $DEBCONFFILE [ -n "$GenerateMetadataJson" ] && echo "GenerateMetadataJson $GenerateMetadataJson" >> $DEBCONFFILE # Finish the configuration file update, by applying changes to the real configuration file. ucf_cleanup "$CLAMAVCONF" ucf_upgrade_check "$CLAMAVCONF" "$DEBCONFFILE" /var/lib/ucf/cache/:etc:clamav:clamd.conf rm -f "$DEBCONFFILE" # Add additional groups (if any) if [ -n "$AddGroups" ]; then for group in $AddGroups; do id "$User" | grep -q "$group" || adduser "$User" "$group" done fi else # Let the configuration be handled manually. ucf_cleanup "$CLAMAVCONF" ucf -p "$CLAMAVCONF" if [ -e "$CLAMAVSYSTEMDCLAMDONF" ]; then echo "Disabling old systemd service override options for clamav-daemon" mv "$CLAMAVSYSTEMDCLAMDONF" "$CLAMAVSYSTEMDCLAMDONF".dpkg-old ucf -p "$CLAMAVSYSTEMDCLAMDONF" fi fi # Set permission for the configuration file. chmod 644 $CLAMAVCONF || true chown root:root $CLAMAVCONF || true # Read the configuration file slurp_config "$CLAMAVCONF" if [ -n "$LogFile" ]; then if echo "$LogFile" | grep -q '^/dev/'; then make_logrotate=false else if [ "$LogRotate" = "true" ]; then make_logrotate=true else make_logrotate=false fi fi [ -z "$User" ] && User=clamav if [ "$make_logrotate" = 'true' ]; then # update the logrotate file echo "$LogFile {" > $DEBROTATEFILE echo " rotate 12" >> $DEBROTATEFILE echo " weekly" >> $DEBROTATEFILE echo " compress" >> $DEBROTATEFILE echo " delaycompress" >> $DEBROTATEFILE echo " create 640 $User adm" >> $DEBROTATEFILE echo " postrotate" >> $DEBROTATEFILE echo " if [ -d /run/systemd/system ]; then" >> $DEBROTATEFILE echo " systemctl -q is-active clamav-daemon && systemctl kill --signal=SIGHUP clamav-daemon || true" >> $DEBROTATEFILE echo " else" >> $DEBROTATEFILE echo " invoke-rc.d clamav-daemon reload-log > /dev/null || true" >> $DEBROTATEFILE echo " fi" >> $DEBROTATEFILE echo " endscript" >> $DEBROTATEFILE echo " }" >> $DEBROTATEFILE touch "$LogFile" if [ -f "$LogFile" ] && [ ! -L "$LogFile" ]; then chown "$User":adm "$LogFile" chmod 0640 "$LogFile" fi ucf_cleanup "$CLAMAVROTATEFILE" ucf_upgrade_check "$CLAMAVROTATEFILE" "$DEBROTATEFILE" /var/lib/ucf/cache/:etc:logrotate.d:clamav-daemon rm -f $DEBROTATEFILE if [ -e "$CLAMAVROTATEFILE".dpkg-old ]; then echo "Removing old logrotate script for clamav-daemon" rm -f "$CLAMAVROTATEFILE".dpkg-old fi else if [ -e "$CLAMAVROTATEFILE" ]; then echo "Disabling old logrotate script for clamav-daemon" mv "$CLAMAVROTATEFILE" "$CLAMAVROTATEFILE".dpkg-old ucf -p "$CLAMAVROTATEFILE" fi fi else if [ -e "$CLAMAVROTATEFILE" ]; then echo "Disabling old logrotate script for clamav-daemon" mv "$CLAMAVROTATEFILE" "$CLAMAVROTATEFILE".dpkg-old ucf -p "$CLAMAVROTATEFILE" fi fi db_stop || true ;; abort-upgrade|abort-remove|abort-deconfigure) ;; *) echo "postinst called with unknown argument \`$1'" >&2 exit 1 ;; esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. # Automatically added by dh_apparmor/3.0.8-3 if [ "$1" = "configure" ]; then APP_PROFILE="/etc/apparmor.d/usr.sbin.clamd" if [ -f "$APP_PROFILE" ]; then # Add the local/ include LOCAL_APP_PROFILE="/etc/apparmor.d/local/usr.sbin.clamd" test -e "$LOCAL_APP_PROFILE" || { mkdir -p `dirname "$LOCAL_APP_PROFILE"` install --mode 644 /dev/null "$LOCAL_APP_PROFILE" } # Reload the profile, including any abstraction updates if aa-enabled --quiet 2>/dev/null; then apparmor_parser -r -T -W "$APP_PROFILE" || true fi fi fi # End automatically added section # Automatically added by dh_installinit/13.11.4 if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then if [ -z "${DPKG_ROOT:-}" ] && [ -x "/etc/init.d/clamav-daemon" ]; then update-rc.d clamav-daemon defaults >/dev/null if [ -n "$2" ]; then _dh_action=restart else _dh_action=start fi invoke-rc.d --skip-systemd-native clamav-daemon $_dh_action || exit 1 fi fi # End automatically added section # Automatically added by dh_installsystemd/13.11.4 if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then # The following line should be removed in trixie or trixie+1 deb-systemd-helper unmask 'clamav-daemon.service' >/dev/null || true # was-enabled defaults to true, so new installations run enable. if deb-systemd-helper --quiet was-enabled 'clamav-daemon.service'; then # Enables the unit on first installation, creates new # symlinks on upgrades if the unit file has changed. deb-systemd-helper enable 'clamav-daemon.service' >/dev/null || true else # Update the statefile to add new symlinks (if any), which need to be # cleaned up on purge. Also remove old symlinks. deb-systemd-helper update-state 'clamav-daemon.service' >/dev/null || true fi fi # End automatically added section # Automatically added by dh_installsystemd/13.11.4 if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then # The following line should be removed in trixie or trixie+1 deb-systemd-helper unmask 'clamav-daemon.socket' >/dev/null || true # was-enabled defaults to true, so new installations run enable. if deb-systemd-helper --quiet was-enabled 'clamav-daemon.socket'; then # Enables the unit on first installation, creates new # symlinks on upgrades if the unit file has changed. deb-systemd-helper enable 'clamav-daemon.socket' >/dev/null || true else # Update the statefile to add new symlinks (if any), which need to be # cleaned up on purge. Also remove old symlinks. deb-systemd-helper update-state 'clamav-daemon.socket' >/dev/null || true fi fi # End automatically added section # Automatically added by dh_installsystemd/13.11.4 if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then if [ -d /run/systemd/system ]; then systemctl --system daemon-reload >/dev/null || true if [ -n "$2" ]; then _dh_action=restart else _dh_action=start fi deb-systemd-invoke $_dh_action 'clamav-daemon.service' 'clamav-daemon.socket' >/dev/null || true fi fi # End automatically added section exit 0