clamav

This is a SIMP module

This module is a component of the System Integrity Management Platform, a compliance-management framework built on Puppet.

If you find any issues, they can be submitted to our JIRA.

Please read our Contribution Guide and visit our developer wiki.

Work in Progress

Please excuse us as we transition this code into the public domain.

Downloads, discussion, and patches are still welcome!

• Wed Oct 03 2018 Jeanne Greulich jeanne.greulich@onyxpoint.com - 6.1.0-0

• Add package_ensure parameter to use simp_options package_ensure value for managing the installation of packages. If simp_options is not being used it will default to install ( previously set to latest) If not using simp_options the value can be changed by setting clamav::package_ensure to latest in hiera.
• update Gemfile to use puppet ~> 5.0
• update .rubyversion to 2.4.4

• Fri Sep 07 2018 Liz Nemsick lnemsick.simp@gmail.com - 6.1.0-0

• Drop Hiera 4 support

• Mon Mar 19 2018 Trevor Vaughan tvaughan@onxypoint.com - 6.1.0-0

• Add support for Puppet 5 and OEL

• Mon Sep 11 2017 Chris Tessmer chris.tessmeri@onyxpoint.com - 6.0.2-0

• Permit clamav to disable both freshclam AND rsync updates

• Wed Apr 19 2017 Nick Markowski nmarkowski@keywcorp.com - 6.0.1-0

• Updated logrotate to use new lastaction API
• Update puppet dependency and remove OBE pe dependency in metadata.json

• Thu Dec 13 2016 Nick Markowski nmarkowski@keywcorp.com - 6.0.0-0

• Updated global catalysts
• Strong typed

• Thu Dec 01 2016 Trevor Vaughan tvaughan@onyxpoint.com - 6.0.0-0

• Updated to use the environment-aware rsync in SIMP 6

• Fri Nov 18 2016 Chris Tessmer chris.tessmer@onyxpoint.com - 5.0.0-0

• Updated to compliance_markup version 2

• Tue Aug 02 2016 Trevor Vaughan tvaughan@onyxpoint.com - 4.1.1-0

• Update to new naming scheme

• Wed Feb 10 2016 Ralph Wright ralph.wright@onypoint.com - 4.1.0-8

• Added compliance function support

• Tue Nov 10 2015 Chris Tessmer chris.tessmer@onypoint.com - 4.1.0-7

• migration to simplib and simpcat (lib/ only)

• Fri Aug 28 2015 Nick Markowski nmarkowski@keywcorp.com - 4.1.0-6

• Added enable_clamav parameter to toggle: package install, freshclam/clamscan cron jobs, clamav rsync, antivirus selboolean.
• The clamav user, group now manageable and package name mutable.
• Added validation to init.pp

• Fri Feb 27 2015 Trevor Vaughan tvaughan@onyxpoint.com - 4.1.0-5

• Updated to use the new 'simp' environment.
• Changed calls directly to /etc/init.d/rsyslog to '/sbin/service rsyslog' so that both RHEL6 and RHEL7 are properly supported.

• Fri Jan 16 2015 Trevor Vaughan tvaughan@onyxpoint.com - 4.1.0-4

• Changed puppet-server requirement to puppet

• Mon Jun 23 2014 Trevor Vaughan tvaughan@onyxpoint.com - 4.1.0-3

• Fixed SELinux check for when selinux_current_mode is not found.

• Mon May 05 2014 Trevor Vaughan tvaughan@onyxpoint.com - 4.1.0-2

• Removed management of /var/lib/clamav to avoid SELinux labeling fights with Rsync. This directory is managed by the RPM.
• Fixed a template bug in the directory specifications.
• Changed scan_directory to scan_targets in set_schedule
• Set up the schedule by default via a boolean in the clamav class
• Removed /home from the default scan list and added /dev/shm

• Wed Apr 16 2014 Kendall Moore kmoore@keywcorp.com - 4.1.0-2

• Added spec tests.
• Fixed incorrect validation in manifests.

• Fri Apr 04 2014 Nick Markowski nmarkowski@keywcorp.com - 4.1.0-2

• Selinux booleans now set if mode != disabled

• Thu Feb 13 2014 Kendall Moore kmoore@keywcorp.com - 4.1.0-1

• Converted all string booleans into native booleans.

• Tue Dec 10 2013 Kendall Moore kmoore@keywcorp.com - 4.1.0-0

• Changed singleton clamav::set_schedule define to paramterized class and updated code documentation for compatibility with puppet 3 and hiera.

• Tue Dec 10 2013 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-11

• Removed the 'clamav' user and group since they are no longer used by the default clamav packages.
• Updated the configuration to allow for the removal of the freshclam cron job by default. If enabled, freshclam will be used instead of rsync.

• Sat Dec 07 2013 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-10

• Modified the selinux boolean from clamscan_can_scan_system to antivirus_can_scan_system which is present in the newest versions of ClamAV

• Thu Oct 03 2013 Kendall Moore kmoore@keywcorp.com - 4.0.0-9

• Updated all erb templates to properly scope variables.

• Mon Jun 10 2013 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-8

• Added support for more clamscan options in the clamav::set_schedule define and reduced the default noise level in the output so that user's cron logs aren't spammed.

• Thu May 02 2013 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-7

• Set the clamscan_can_scan_system boolean for ClamAV

• Mon Feb 25 2013 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-6

• Added a call to $::rsync_timeout to the rsync call since it is now required.
• Created a Cucumber test to ensure the clamav module installs correctly.
• We may have finally gotten rsync and the clamav module in sync!
  • The clamav user/group is 410
  • The clam user/group is 409

• Fri Nov 16 2012 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-5

• Changed the group of /var/lib/clamav to 'clam' and the mode to 664 for freshclam support.

• Fri Sep 21 2012 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-4

• Reversed the order of removal for clamav.i686 and clamav_lib.i686 since they did not match the proper depencency order in the RPMs.

• Wed Apr 11 2012 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-3

• Moved mit-tests to /usr/share/simp...
• Updated pp files to better meet Puppet's recommended style guide.

• Fri Mar 02 2012 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-2

• Improved test stubs.

• Mon Dec 26 2011 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-1

• Updated the spec file to not require a separate file list.

• Mon Nov 07 2011 Trevor Vaughan tvaughan@onyxpoint.com - 4.0.0-0

• Fixed call to rsyslog restart for RHEL6.

• Thu Jan 27 2011 Trevor Vaughan tvaughan@onyxpoint.com - 2.0.0-1

• Updated to use rsync native type

• Tue Jan 11 2011 Trevor Vaughan tvaughan@onyxpoint.com - 2.0.0-0

• Refactored for SIMP-2.0.0-alpha release

• Wed Oct 27 2010 Trevor Vaughan tvaughan@onyxpoint.com - 1.0-2

• Added set_schedule define

• Tue Oct 26 2010 Trevor Vaughan tvaughan@onyxpoint.com - 1.0-1

• Converting all spec files to check for directories prior to copy.

• Wed May 19 2010 Trevor Vaughan tvaughan@onyxpoint.com - 1.0-0

• Code and Doc refactor

• Fri Nov 06 2009 Trevor Vaughan tvaughan@onyxpoint.com - 0.1-0

• Initial Release