M O N I T O R
Right before a file within the FreeBSD filesystem is opened, recorded or
executed it is intercepted by the anti-virus module and transferred to Moni-
tor. The monitor processes the file and transfers its name to the daemon
process, which checks for viruses in the file. If the file is not infected, the
Daemon returns the appropriate code to the Monitor, which informs the
anti-virus module that a permission to work with this file is granted. If the file
is infected, the daemon process returns the error code and the Monitor dis-
ables the anti-virus module from working with the file. The file is handled by
the daemon process following the predefined settings. As you see, there is
a chain of interconnected programs, every component of which cannot per-
form its functions without the others.
The kavmon anti-virus module and Monitor are supplied as a source code
and therefore must be assembled before you are able to launch them.
After installation (see chapter 2) the Monitor program is located in the
/usr/local/sbin
directory, while the kavmon anti-virus module is located in the
/modules
directory.
For your operating system to automatically launch the anti-
virus module every time it is started,
add the file with containing the
/sbin/kldload
<the_kavmon.ko_file_path>
string into the required start level.
For example:
/sbin/kldload/modules/kavmon.ko
8.2.2. Configuring Monitor
You may configure the Monitor program by changing its settings within the
configuration file
monitor.conf
. By editing the configuration file you can:
•
Define the program performance parameters.
•
Define the program reporting mode and the path to a log file with
the program performance results.
101
