File System Monitoring Setting

Top  Previous  Next

To configure the Linux file system monitoring with the SpIDer Guard monitor, specify values for parameters that are in the [LinuxSpider] settings section of the configuration file:

Enable the monitor by setting the Start value to Yes;

Specify the mode of operation with the file system monitor in the Mode parameter (it is recommended that you use the Auto value).

If required, in the ExcludedProc parameter, list the paths to the executable files of trusted applications, i.e. applications whose access to files will not be controlled by the monitor;

In the IncludedPath and ExcludedPath parameters specify the monitoring scope and the exclusion scope in the file system (the lists of paths to objects monitored and excluded from monitoring). For example, if some paths are controlled by the file server Samba or are the NSS volumes, these paths should be added to the exclusion scope in order to avoid conflicts during the scanning by different monitors;

Specify the parameters of file scanning and monitor’s reaction on detection of various types of threats .

After all settings are adjusted, restart Dr.Web for UNIX File Servers (use the command drweb-ctl reload). You can also restart the configuration daemon Dr.Web ConfigD (use the service drweb-configd restart command).