F-SECURE LINUX SECURITY Manual page 44

44 | F-Secure Linux Security | Using the Product
Note: If Scan on open
if Scan only executables
3. Define Whitelisted executables
any file accesses from whitelisted executables.
Note: Be sure that you can trust the executable file that you add as a whitelisted
application. It is recommended to limit the file access for whitelisted applications.
Whitelisting an application is always a potential security risk and should be used with
caution.
4. If you want to use the whitelist setting with Integrity Checking, turn on
executables must match baseline
in the known files list. If this setting is enabled and the executable cannot be found in the
integrity checking baseline, it is not whitelisted.
Note: If you have defined whitelisted applications, it is highly recommended to turn on
this option.
5. If you want to scan files every time they are opened, turn on
6. If you want to scan files every time they are closed, turn on
7. If you want to scan files every time when they are run, turn on
executable.
Note: Only regular files on mounted filesystems can be scanned. Special files, such as
CD-ROM or DAT devices (/dev/st0, /dev/hda and such), cannot be scanned unless they are
mounted as filesystems, or files are extracted on a filesystem from the tape first.
Archive Scanning
The archive scanning can scan files inside compressed ZIP, ARJ, LZH, RAR, CAB, TAR,
BZ2, GZ, JAR and TGZ archives.
In the I want to... page in the Web User Interface, click
and configure advanced virus scanning settings.
1. Turn on Scan inside archives
Note: When the archive scanning is enabled, some e-mail clients may stop processing
further e-mails when an infected e-mail is opened.
2. In Maximum number of nested
product scans. Nested archives are archives inside other archives.
and Scan on execute are turned off, nothing is scanned even
is enabled.
which may access any files. The virus scan does not block
to require that whitelisted executables are unmodified
Modify advanced settings...
if you want to scan files inside archives.
archives, set the number of levels in nested archives the
Whitelisted
Scan when opening a file.
Scan when closing a file.
Scan when running an
to view