Template the mount points to scan

This commit is contained in:
Jason Rothstein 2021-07-06 20:39:44 -05:00
parent b6679a3545
commit 7c890e3b82

View File

@ -689,6 +689,7 @@ User clamscan
# and not perform any blocking. # and not perform any blocking.
# Default: no # Default: no
#OnAccessPrevention yes #OnAccessPrevention yes
OnAccessPrevention yes
# When using prevention, if this option is turned on, any errors that occur # When using prevention, if this option is turned on, any errors that occur
# during scanning will result in the event attempt being denied. This could # during scanning will result in the event attempt being denied. This could
@ -715,7 +716,9 @@ User clamscan
# Default: disabled # Default: disabled
#OnAccessMountPath / #OnAccessMountPath /
#OnAccessMountPath /home/user #OnAccessMountPath /home/user
OnAccessMountPath / {% for item in ansible_mounts %}
OnAccessMountPath {% item.mount %}
{% endfor %}
# With this option you can whitelist the root UID (0). Processes run under # With this option you can whitelist the root UID (0). Processes run under
# root with be able to access all files without triggering scans or # root with be able to access all files without triggering scans or
@ -757,6 +760,7 @@ OnAccessExcludeUname clamupdate
# connection problems (or other issues). # connection problems (or other issues).
# Default: 0 # Default: 0
#OnAccessRetryAttempts 3 #OnAccessRetryAttempts 3
OnAccessRetryAttempts 3
## ##
## Bytecode ## Bytecode