Skyld AV provides on access virus scanning for Linux.

The fanotify API is used to control file access. This requires a kernel compiled with


On Debian and Fedora you can check the configuration with

grep CONFIG_FANOTIFY /boot/config-$(uname -r)

Kernel version 3.8.0 or newer is recommended. You can check the version you are using with

uname -a

ClamAV is used for scanning.


Download as .zip
Download as .tar.gz
View on GitHub


Install build dependencies. For Debian use the following command

sudo apt-get install git autoconf-archive libclamav-dev libmount-dev \

Clone the git repository.

git clone skyldav

Move to the source directory.

cd skyldav/

Update from git repository.

git pull

Create the configure script.

Configure the package.


Build the package.


Test the package.

make check

Install the package.

sudo make install

In directory examples files are supplied which can be used to start Skyld AV as daemon on a Debian system. Copy these to /etc/init.d and /etc/default.