Configuration Parameters

The component uses configuration parameters which are specified in the [NSS] section of the integrated configuration file of Dr.Web for UNIX File Servers.

LogLevel

{logging level}

Logging level of the component.

If the parameter value is not specified, the DefaultLogLevel parameter value from the [Root] section is used.

Default value: Notice

Log

{log type}

Logging method

LogProtocol

{Boolean}

Indicates whether protocol messages are registered in the log file of NSS volume monitor SpIDer Guard for NSS.

Allowed values:

•Yes—messages are registered.

•No—messages are not registered.

Default value: No

ExePath

{path to file}

Path to the executable file of the component.

Default value: <opt_dir>/bin/drweb-nss

•For Linux: /opt/drweb.com/bin/drweb-nss

Start

{Boolean}

The component must be launched by the Dr.Web ConfigD configuration daemon.

When you specify the Yes value for this parameter, it instructs the configuration daemon to start the component immediately; and when you specify the No value, it instructs the configuration daemon to terminate the component immediately.

Default value: No

NssVolumesMountDir

{path to directory}

Path to the file system directory where NSS file system volumes are mounted.

Default value: /media/nss

ProtectedVolumes

{volume name}

Names of NSS file system volumes mounted on NssVolumesMountDir and protected by the suite. If no value is specified, all volumes in the volume mounting point of NssVolumesMountDir must be protected.

You can specify a list as the parameter value. The values in the list must be separated with commas (each value in the quotation marks). The parameter can be specified more than once in the section (in this case, all its values are combined into one list).

Example: Add to the list of volumes vol1 and vol2.

1.Adding of values to the configuration file.

•Two values in one string

[<%NSSSPIDER_SECTION%>]
ProtectedVolumes = "vol1", "vol2"

•Two strings (one value per a string)

[<%NSSSPIDER_SECTION%>]
ProtectedVolumes = vol1
ProtectedVolumes = vol2

2.Adding values via the command drweb-ctl cfset.

# drweb-ctl cfset <%NSSSPIDER_SECTION%>.ProtectedVolumes -a vol1
# drweb-ctl cfset <%NSSSPIDER_SECTION%>.ProtectedVolumes -a vol2

Default value: (not set)

ExcludedPath

{path to file or directory}

Path to the object which must be skipped during scanning. You can specify a directory or file path. If a directory is specified, all directory content including subdirectories will be skipped. The exception is objects paths to which are specified in the parameter IncludedPath—such objects will be scanned.

Example: Add to the list the files /etc/file1 and directory /usr/bin.

1.Adding of values to the configuration file.

•Two values in one string

[<%NSSSPIDER_SECTION%>]
ExcludedPath = "/etc/file1", "/usr/bin"

•Two strings (one value per a string)

[<%NSSSPIDER_SECTION%>]
ExcludedPath = /etc/file1
ExcludedPath = /usr/bin

2.Adding values via the command drweb-ctl cfset.

# drweb-ctl cfset <%NSSSPIDER_SECTION%>.ExcludedPath -a /etc/file1
# drweb-ctl cfset <%NSSSPIDER_SECTION%>.ExcludedPath -a /usr/bin

Paths in the list must be relative to a path indicated in NssVolumesMountDir.

Default value: (not set)

IncludedPath

{path to file or directory}

Path to the object which must be scanned. You can specify a directory or file path. If a directory is specified, all directory content will be scanned.

This parameter can be used only if you want to allow scanning of separate objects (files and subdirectories) paths to which is specified in the parameter ExcludedPath. In addition, this parameter has priority over the parameter ExcludedPath: if a path to an object is specified in the both parameters, this object will be scanned.

Example: Add to the list the files /etc/file1 and directory /usr/bin.

1.Adding of values to the configuration file.

•Two values in one string

[<%NSSSPIDER_SECTION%>]
IncludedPath = "/etc/file1", "/usr/bin"

•Two strings (one value per a string)

[<%NSSSPIDER_SECTION%>]
IncludedPath = /etc/file1
IncludedPath = /usr/bin

2.Adding values via the command drweb-ctl cfset.

# drweb-ctl cfset <%NSSSPIDER_SECTION%>.IncludedPath -a /etc/file1
# drweb-ctl cfset <%NSSSPIDER_SECTION%>.IncludedPath -a /usr/bin

Paths in the list must be relative to a path indicated in NssVolumesMountDir.

Default value: (not set)

OnKnownVirus

{action}

Action applied by Dr.Web for UNIX File Servers to a known threat (virus, etc.) detected with signature analysis during the scanning initiated by NSS volume monitor.

Possible values: Cure, Quarantine, Delete

Default value: Cure

OnIncurable

{action}

Action applied by Dr.Web for UNIX File Servers to an incurable threat (that is, an attempt to apply Cure failed) detected during the scanning initiated by NSS volume monitor.

Possible values: Quarantine, Delete

Default value: Quarantine

OnSuspicious

{action}

Action applied by Dr.Web for UNIX File Servers to an unknown threat (or suspicious objects) detected by using heuristic analysis during the scanning initiated by NSS volume monitor.