ESET NOD32 ANTIVIRUS - FOR LINUX-BSD FILE SERVER Manuale utente

NOD32 for Linux/BSD

File Server

Installation Manual

and User’s documentation

w e p r o t e c t d i g i t a l w o r l d s

Table of contents

1. Introduction ........................................................... 3

2. Installation.............................................................. 5

3. Product’s Roadmap .................................................. 7

4. Integration with Linux/BSD File System....................11

4.1. On-demand scanner........................................................... 12

4.2. On-access scanner.............................................................. 12

4.2.1. On-access scanner powered by Dazuko ........................... 13

4.2.1.1. Operation principle....................................................... 13

4.2.1.2. Installation and conguration...................................... 14

4.2.1.3. Tips............................................................................... 15

4.2.2. On-access scanner using preload LIBC library.................. 16

4.2.2.1. Operation principle....................................................... 16

4.2.2.2. Installation and conguration...................................... 16

4.2.2.3. Tips............................................................................... 17

5. Important NOD32LFS/NOD32BFSMechanisms............19

5.1. User Specic Conguration................................................. 20

5.2. Handle Object Policy .......................................................... 20

5.3. Samples Submission System .............................................. 21

6. NOD32 system update and maintenance...................23

6.1. Basic concept of NOD32 system update.............................. 24

6.1.1. NOD32 mirror creation..................................................... 24

6.1.2. Generation of NOD32 scanner loading modules .............. 24

6.2. Automatic update of the virus denitions database ........... 25

7. Let us know ............................................................27

NOD32 for Linux/BSD File Server, First Edition

Published on 6th December 2006

NOD32 for Linux/BSD File Server was developed by

Eset, s.r.o. For more information visit www.eset.com.

may be reproduced, stored in a retrieval system or

transmitted in any form or by any means, electronic,

mechanical, photocopying, recording, scanning, or

otherwise without a permission in writing from the

author. Eset, s.r.o. reserves the right to change any

of the described application software without prior

notice.

Eset, spol. s r. o.

Svoradova 1, 811 03 Bratislava, Slovak Republic

http://www.eset.sk/en

NOD32 for Linux/BSD File Server

Chapter 1:

Introduction

1 Introduction

Dear user, you have acquired NOD32 for Linux/BSD File Server - NOD32LFS/NOD32BFS - probably the best anti-

virus system running under the Linux/BSD OS. As you will soon nd out, the system using, the state-of-the-artNOD32

scanning engine, has unsurpassed scanning speed and detection rate, combined with a very small footprint that makes

it the ideal choice for any Linux/BSD OS server.

In the rest of this chapter we review a key features of the system.

NOD32 scanning engine algorithms provide both the highest detection rate and the fastest scanning times.

The system is developed to run on the single-processor units as well as on themulti-processor units.

It includes unique advanced heuristics forWin32 worms and back-doors.

InbuiltNOD32 archivers unpack archived objectswithout the need for any external programs.

In order to increase speed and eciency of the system, its architecture is based on the running daemon (resident

program) where all the scanning requests are sent to.

The system supports selective scanner conguration specic for user or client/server identication.

Six various levels of logging can be congured to get information about system activity and inltrations.

One of the major advantages is the fact that the system installation does not require external libraries or programs

except for LIBC.

The system can be congured to notify any person in case of detected inltration. To run eciently, the system

requires just 16MB of hard-disk space and 32MB of RAM.The system runs smoothly under the 2.2.x, 2.4.x and 2.6.x

Linux OS kernel versions and also under 5.x, 6.x FreeBSD OS kernel versions.

From lower-powered, small oce servers to enterprise-class ISP servers with thousands of users, the system delivers

the performance and scalability you expect from a UNIX based solution and the unequaled security of NOD32.

•

NOD32 for Linux/BSD File Server

Chapter 2:

Installation

2 Installation

6NOD32 for Linux/BSD File Server

This product is distributed as a binary le. Its format for Linux OS is:

nod32ls.i386.ext.bin

where ’ext’is a Linux OS distribution dependent sux, i.e. ’deb’for Debian Linux OS distribution, ’rpm’for RedHat and

SuSE Linux OS distributions, ’tgz’for other Linux OS distributions.

Note that we support also RedHat Ready and Novell (SuSE) Ready variation of the product1The RedHat and Novell

(SuSE) Ready variation of the binary le format is:

nod32ls-rsr.i386.rpm.bin

Slightly dierent format is used to name the binary le for BSD OS,

nod32bs.i386.ext.tgz.bin

where ’ext’ stands for BSD OS distribution dependent sux, i.e. ’fbs4’for FreeBSD 4.xx, ’fbs5’ for FreeBSD 5.xx and

’fbs6’for FreeBSD 6.xx OS distributions.

In order to install or update the product on Linux OS, use the statement:

sh ./nod32ls.i386.ext.bin

resp. the RedHat Ready or Novell (SuSE) Ready variation of the product is installed using the following statement:

sh ./nod32ls-rsr.i386.rpm.bin

In case of BSD OS, the install statement is as follows.

sh ./nod32bs.i386.ext.tgz.bin

As a result the User License Acceptance Agreement related with the product is shown. Once you have conrmed

the Acceptance Agreement, the whole installation package is extracted into the current working directory and relevant

information regarding installation or update of the package extracted as well as information necessary for uninstall the

already installed package is printed into terminal.

Once the package is installed and the main NOD32 daemon service is running, in Linux OS you can check its operation

by using command:

ps -C nod32d

In case of BSD OS you can use a similar command:

ps -ax nod32d | grep nod32d

You will see the following (or similar) message on return:

PID TTY TIME CMD

2226 ? 00:00:00 nod32d

2229 ? 00:00:00 nod32d

where at least two main NOD32 daemon ’nod32d’processes running in the background have to be present. One of

the processes is so-called process and threads manager of the system.The other serves as NOD32 scanning process.

 The dierence from the original RedHat and SuSE Linux OS package is that the RedHat Ready and Novell SuSE Ready package

meets criteria dened by FHS Filesystem Hierarchy Standard dened as a part of Linux Standard Base document required by the

RedHat Ready and Novell SuSE Ready certicate This means in particular that the package is installed as an addon application

ie the primary installation directory is ’⁄opt⁄eset⁄nod’instead of the base Linux OS directory structure However there are more

dierences between the original and ’Ready’variation of the product that are beyond the scope of this document

Chapter 3:

Product’s Roadmap

3 Product’s Roadmap

Once the product package has been successfully installed, it is time to become familiar with its content.

The structure of the NOD32LFS/NOD32BFS is shown in the gure 3-1. The system is composed of the following

components.

CORE

Core of the NOD32LFS/NOD32BFS consists of main NOD32 system control and scanning daemon module nod32d.

The daemon uses NOD32 API library libnod32.so and NOD32 loading modules nod32.00X to provide essential system

tasks:anti-virusscanning,maintenanceoftheagentdaemon processes,maintenanceof the samples submission system,

logging, notication, etc.. To get detailed information on the main NOD32 system control and scanning daemon, refer

to nod32d(8) manual page.

AGENTS

The purpose of NOD32 agent modules is to integrate the NOD32LFS/NOD32BFS with the Linux/BSD le system

environment. Please note a special chapter in this document devoted to the topic.

UPDATE

The update utilities create a particular fraction of the system. They are built with only one purpose, i.e. update

of NOD32 loading modules containing for instance virus signatures database, archives support, advanced heuristics

support etc. Please note a special chapter in this document devoted to the topic.

CONFIGURATION

Proper conguration is the most important condition for the system operation.Therefore we describe all the related

components in the rest of this chapter. We also strongly recommend to read nod32.cfg(5) manual page, an essential

information source regarding NOD32LMS/NOD32BMS conguration.

After the product package is successfully installed, all the components related to its conguration and authorization

are stored in directory

/etc/nod32

NOD32 for Linux/BSD File Server

Figure 3-1. Structure of NOD32LFS/NOD32BFS.

nod32

libnod32pac.so

nod32dac

AGENTS

license

nod32.cfg

scripts

templates

extern

CONFIGURATION

nod32update

nod32_update

UPDATE

nod32d libnod32.so nod32.00X

CORE

Note that in case of RedHat Ready and Novell (SuSE) Ready variation of the NOD32 for Linux Mail Server the

conguration and authorization directory is

/etc/opt/eset/nod32

The directory consists of the following les.

nod32.cfg

This is the most important conguration le as it maintains the major part of the product functionality. For this

reason the le is further referred to as ‘main conguration le‘ or ‘main NOD32 conguration le‘. After exploring the

le you can see that it is built from various parameters distributed within sections. Note the section names always

enclosed in square brackets. In the main conguration le there is always one global and several so-called agent

sections. Parameters in global section are used to dene conguration options of main NOD32 daemon ‘nod32d‘ as

well as default values of NOD32 scanning engine conguration options. Parameters in agent sections are used to dene

conguration options of so-called agents, i.e. modules used to intercept various data ow types in the computer and/

or its neighborhood and prepare this data for anti-virus scanning. Note that besides the number of parameters used

for the system conguration, there is also a number of rules determining organization of conguration le. To become

familiar with this knowledge. please refer to nod32.cfg(5), nod32d(8) manual page and also to manual pages related

to relevant agents.

license

This directory is used to store the product license key you have acquired fromyour vendor. Note that the main

NOD32 daemon will always check only this directory to evaluate license key validity unless it is redened by the main

conguration le parameter ’nod32_lic_dir’.

scripts/nod32d_license_warning_script

This script, if enabled by main conguration le parameter ’license_warn_enabled’, is executed since 30 days (once

per day) before product license expiration. It is used to send e-mail notication about the expiration status to system

administrator.

scripts/nod32d_script

This script, if enabled by main conguration le parameter ’exec_script’, is executed in case the inltration has been

detected by the anti-virus system. It is used to send e-mail notication about the event to system administrator.

chapter 3 / Product’s Roadmap

NOD32 for Linux/BSD File Server

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali ESET Software

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET NOD32 ANTIVIRUS 4 - FOR MICROSOFT WINDOWS... Manuale utente

ESET

ESET MAIL SECURITY - ANNEXE 209 Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET GATEWAY SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR MICROSOFT WINDOWS... Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR LINUX MAIL SERVERS Manuale utente

ESET

ESET MOBILE SECURITY - ANNEXE 706 SYMBIAN Manuale utente

ESET

ESET FILE SECURITY - ANNEXE 22 Manuale utente

ESET

ESET MOBILE ANTIVIRUS - FOR WINDOWS MOBILE Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET FILE SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET MAIL SECURITY 4 Manuale utente

ESET

ESET GATEWAY SECURITY Manuale utente

ESET

ESET SMART SECURITY Manuale utente

ESET

ESET FILE SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET REMOTE ADMINISTRATOR 4 Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR MICROSOFT WINDOWS... Manuale elenco delle parti

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET FILE SECURITY - FOR LINUX BSD AND SOLARIS Manuale utente

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente