Forge Home


clamav management


7,798 latest version

3.9 quality score

Version information

  • 0.1.0 (latest)
  • 0.0.2
  • 0.0.1
released Dec 8th 2015

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'arusso-clamav', '0.1.0'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add arusso-clamav
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install arusso-clamav --version 0.1.0

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.



arusso/clamav — version 0.1.0 Dec 8th 2015

ClamAV Puppet Module

This module provides mechanisms to manage clamav, allowing for the creation of scheduled scans via the clamav::scan define as well as running the clamd daemon using the clamav::clamd class.


Setup a clamav scan that scans everything except the /sys and /dev, and does not run on a schedule.

 clamav::scan { 'all-but-sys-and-dev':
   exclude_dir => ['(?i)/^\/(sys|dev)/'],
   scan        => ['/'],
   enable      => false,

Add signature and file whitelist entries in /var/lib/clamav/local.ign2, /var/lib/clamav/local.sfp, and /var/lib/clamav/local.fp:

class { 'clamav':
  whitelist_sig => [
  whitelist_sha => [
  whitelist_md5 => [ 'd41d8cd98f00b204e9800998ecf8427e' ]

Enable clamd:

include clamav::clamd

Enable clamd and setup on-access scanning

class { 'clamav::clamd':
  scan_on_access          => 'yes',
  on_access_max_file_size => '15M',
  on_access_exclude_path  => [ '/srv/noscan' ],
  on_access_include_path  => [ '/srv' ],


See LICENSE file


Copyright © 2015 The Regents of the University of California


Aaron Russo


Please log tickets and issues at the Projects site