[NSS] Section

In the [NSS] section, settings for integration with the NSS file system are specified.

Parameter

Description

[NSS]

NSSVolumesMountDir = {path to directory}

Path to the directory where all NSS volumes are mounted.

Specify NSS volumes that must be protected from viruses in the ProtectedVolumes parameter value.

Default value:

NSSVolumesMountDir = /media/nss

ProtectedVolumes = {list of volumes}

List of NSS volumes to be protected from viruses. The items in the list must be separated by commas.

If the parameter value is empty, all subdirectories specified in the NSSVolumesMountDir parameter are protected. If some of the listed directories are not NSS volumes, NSS Daemon fails to initialize.

Default value:

ProtectedVolumes =

CheckPoolOptions = {Pool Settings}

Settings of a thread pool that processes scanning tasks.

Default value:

CheckPoolOptions = {2-20}

HeuristicAnalysis = {logical}

Enables or disables heuristic analysis.

The detection method used by the heuristics analyzer is based on certain knowledge about the attributes that characterize malicious code. Each attribute or characteristic has a weight coefficient that determines the level of its severity and reliability. Depending on the sum weight of a file, the heuristics analyzer calculates the probability of unknown virus infection. As with any system of hypothesis testing under uncertainty, the heuristics analyzer may commit type I or type II errors (i.e., it may omit viruses or raise false alarms).

Note that object detected by the heuristic analyzer are treated as suspicious.

Default value:

HeuristicAnalysis = Yes

MaxFileSizeToScan = {Size}

Maximum size of a file that can be scanned by Dr.Web Daemon. If the file size is greater than this value, the file is not scanned. If the parameter value is set to 0, file size is not limited.

Default value:

MaxFileSizeToScan = 0b

IncludedPaths = {list of paths}

List of relative paths that are scanned for viruses, regardless of the ExcludedPaths parameter value.

All paths must be specified relatively to the directory set in the NSSVolumesMountDir parameter value: at first, the volume is indicated an then its subdirectories and files.

The specified paths must be absolute (that is, without symbols that substitute for the current or parent directory: "." and "..").

Default value:

IncludedPaths =

ExcludedPaths = {list of paths}

List of relative paths to files that are not scanned unless they are specified in the IncludedPaths parameter.

All paths must be specified relatively to the directory set in the NSSVolumesMountDir parameter: at first, the volume is indicated an then its subdirectories and files.

The specified paths must be absolute (that is, without symbols that substitute for the current or parent directory: "." and "..").

Default value:

ExcludedPaths =