Introduction

Skyld AV provides on access virus scanning for Linux.

The fanotify API is used to control file access. This requires a kernel compiled with

CONFIG_FANOTIFY=y
CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y

On Debian and Fedora you can check the configuration with

grep CONFIG_FANOTIFY /boot/config-$(uname -r)

Kernel version 3.8.0 or newer is recommended. You can check the version you are using with

uname -a

ClamAV is used for scanning.

Downloads

Download as .zip
Download as .tar.gz
View on GitHub

Installation

Install build dependencies. For Debian use the following command

sudo apt-get install git autoconf-archive libclamav-dev libmount-dev \
libcap-dev

Clone the git repository.

git clone https://github.com/xypron/skyldav.git skyldav

Move to the source directory.

cd skyldav/

Update from git repository.

git pull

Create the configure script.

autogen.sh

Configure the package.

./configure

Build the package.

make

Test the package.

make check

Install the package.

sudo make install

In directory examples files are supplied which can be used to start Skyld AV as daemon on a Debian system. Copy these to /etc/init.d and /etc/default.