ESET FILE SECURITY User Manual

19
closedandexecutedlesarescannedbytheESETSdaemonforviruses.Basedontheresultof
suchscans,accesstogivenlesisdeniedorallowed.
5.3.2. Installation and configuration
The libesets_pac.so library module is installed using a standard installation mechanism of
thepreloadedlibraries.Onehasjusttodenetheenvironmentvariable‘LD_PRELOAD‘withthe
absolute path to the libesets_pac.so library. For more information, please refer to the ld.so(8)
man page.
NOTE: Itisimportantthatthe‘LD_PRELOAD‘environmentvariableisdenedonlyforthenetwork
server daemon processes (ftp, Samba, etc.) that will be under control of the On-access scanner.
Generally, preloading LIBC calls for all operating system processes is not recommended, as this
can dramatically slow the performance of the system or even cause the system to hang. In this
sense,the‘/etc/ld.so.preload‘leshouldnotbeused,norshouldthe‘LD_PRELOAD‘environment
variable be exported globally. Both would override all relevant LIBC calls, which could lead to
system hang-up during initialization.
To ensure that only relevant le access calls within a given le system are intercepted,
executable statements can be overridden using the following line:
LD_PRELOAD=/path/to/libesets_pac.so COMMAND COMMAND-ARGUMENTS
where ‘COMMAND COMMAND-ARGUMENTS‘ is the original executable statement.
Reviewandeditthe[global]and[pac]sectionsoftheESETScongurationle(esets.cfg).In
orderfortheOn-accessscannertofunctioncorrectly,youmustdenethelesystemobjects
(i.e.directoriesandles)thatarerequiredtobeundercontrolofthepreloadlibrary.Thiscanbe
achievedbydeningtheparametersofthe‘ctl_incl‘and‘ctl_excl‘optionsinthe[pac]section
oftheesets.cfgcongurationle.Aftermakingchangestotheesets.cfgle,youcanforcethe
newly created configuration to be re-read by reloading the ESETS daemon.
5.3.3. Tips
In order to activate the On-access scanner immediately after le system start-up, the ‘LD_
PRELOAD‘ environment variable must be dened within the appropriate network le server
initialization script.
EXAMPLE:Let‘sassumewewanttohavetheOn-accessscannertomonitoralllesystemaccess
events immediately after starting the Samba server. Within the Samba daemon initialization
script (/etc/init.d/smb), we would replace the statement
daemon /usr/sbin/smbd $SMBDOPTIONS
with the following line, which is responsible for initialization of the smbd daemon:
LD_PRELOAD=/path/to/libesets_pac.so daemon /usr/sbin/smbd $SMBDOPTIONS
Inthisway,selectedlesystemobjectscontrolledbySambawillbescannedatsystemstart-
up.
chapter 5 Integration with File System services

ESET FILE SECURITY Specifications

General

Real-time Protection	Yes
Advanced Machine Learning	Yes
Multi-layered Defense	Yes
Ransomware Shield	Yes
Web Control	Yes
Botnet Protection	Yes
Exploit Blocker	Yes
Device Control	Yes
Antivirus	Yes
Antispyware	Yes
Anti-Phishing	Yes
File Server Security	Yes
Cloud-Powered Scanning	Yes
Network Attack Protection	Yes
Two-Way Firewall	No
Anti-Spam	No
Management	ESET PROTECT
Category	Software
Supported Operating Systems	Windows Server
Deployment Options	Remote
System Requirements	1 GHz processor, 512 MB RAM
License	Subscription-based